5.5

CVE-2026-43219: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2026-43219DEBIAN-CVE-2026-43219CGA-42gq-7c3q-9533
Published 06-05-2026Last modified 04-07-2026
Open JSON

Vulnerability summary

CVE-2026-43219 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 13
USN-8875-1USN-8875-2USN-8876-1USN-8877-1USN-8878-1USN-8879-1

Timeline

  1. 06-05-2026
    PublishedVulnerability first disclosed.
  2. 04-07-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Fix potential unregister of netdev that has not been registered yet If an error occurs during register_netdev() for the first MAC in cpsw_register_ports(), even though cpsw->slaves[0].ndev is set to NULL, cpsw->slaves[1].ndev would remain unchanged. This could later cause cpsw_unregister_ports() to attempt unregistering the second MAC. To address this, add a check for ndev->reg_state before calling unregister_netdev(). With this change, setting cpsw->slaves[i].ndev to NULL becomes unnecessary and can be removed accordingly.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu146 products
  • linux< 5.15.0-198.208 | < 6.8.0-146.146 | All versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1117.124 | < 6.8.0-1066.69 | All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Chainguard5 products
  • linux-aws-6.12< 6.12.85-r3
  • linux-azure-6.12All versions (No fix recorded)
  • linux-gcp-6.12All versions (No fix recorded)
  • linux-qemu-6.12All versions (No fix recorded)
  • linux-vmware-6.12< 6.12.85-r2
Linux2 products
  • linux≥ ed3525eda4c4983fb8509e488de0a351788041ba, < da8e1623a3028e1d8c75eec7898d94c6f17dce40 | ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < d31a12cee10bbc12b4b523a4709fd1fdee8b7d0f | ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 23acc565186ee27e788408cbd81b92730b6aaa3a | ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 67cca9df4d17f2c824655d31195b2e75334ae286 | ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 14645799ad5253a028cf662e2f9cd18a68f74b31 | ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 29739ec197ed66535bc0b86f14ab66c5f4512138 | ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 349c4cac6f54a81fc107589771f88136a2b20415 | ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 9d724b34fbe13b71865ad0906a4be97571f19cf5 | 5.5
  • linux_kernel≥ 5.5, < 6.18.16 | ≥ 6.19, < 6.19.6
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 6.19.6-1

4 vendors · 154 products

References

24 links
Show all 24 references