CVE-2026-43239: linux Race Condition
CVSS: 8.8v3.1HighModified
AliasesUBUNTU-CVE-2026-43239DEBIAN-CVE-2026-43239
Published 06-05-2026Last modified 19-10-2026
Vulnerability summary
CVE-2026-43239 is a high (CVSS 8.8) Race Condition vulnerability in linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 18.6% of scored vulnerabilities.
CVSS score
8.8/10
010
High · v3.1 (CVE.org)EPSS score
0.27%
0%100%
Low · -0.08 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 23 · Related 23OPENSUSE-SU-2026:21910-1SUSE-SU-2026:22433-1SUSE-SU-2026:22436-1SUSE-SU-2026:22458-1SUSE-SU-2026:22460-1SUSE-SU-2026:23881-1SUSE-SU-2026:23887-1SUSE-SU-2026:23897-1SUSE-SU-2026:23902-1SUSE-SU-2026:2722-1SUSE-SU-2026:2799-1USN-8492-1USN-8492-2USN-8492-3USN-8492-4USN-8492-5USN-8497-1USN-8498-1USN-8499-1USN-8606-1USN-8607-1USN-8609-1USN-8619-1
Timeline
- 06-05-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in ->query_interfaces() It was possible for two query interface works to be concurrently trying to update the interfaces. Prevent this by checking and updating iface_last_update under iface_lock.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 8.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
-0.08 pp
From 0.35% on 21-09-2026
21-09-202621-10-2026
EPSS score0.27%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu132 products
- linux< 6.8.0-134.134 | All versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1060.63 | All versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ aa45dadd34e44fcd6a9df4b395bee5b5633b4cec, < 93e8e3ee165ae4609a1222b516b573837103d2c3 | ≥ aa45dadd34e44fcd6a9df4b395bee5b5633b4cec, < ab6564f416a6eaf1199200b6100952407b438f7d | ≥ aa45dadd34e44fcd6a9df4b395bee5b5633b4cec, < 6287eefaf21ec805d42f941bd368018cf397a7f5 | ≥ aa45dadd34e44fcd6a9df4b395bee5b5633b4cec, < 76cc4faba0343c6db945b8dc75425b33d633e1b8 | ≥ aa45dadd34e44fcd6a9df4b395bee5b5633b4cec, < c3c06e42e1527716c54f3ad2ced6a034b5f3a489 | 5.19
- linux_kernelEOL≥ 5.19.1, < 6.6.128 | ≥ 6.7, < 6.12.75 | ≥ 6.13, < 6.18.16 | ≥ 6.19, < 6.19.6 | 5.19 | 5.19:rc4 | 5.19:rc5 | 5.19:rc6 | 5.19:rc7 | 5.19:rc8
Debian1 product
- linuxAll versions (No fix recorded) | < 6.12.85-1 | < 6.19.6-1
3 vendors · 135 products
