CVE-2026-43208
Published: May 6, 2026
Modified: May 11, 2026
CVSS v3.1
9.8
Description
In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to set_rps_cpu() Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flow_id in set_rps_cpu(), do not assume we can use the value computed by get_rps_cpu(). Otherwise we risk out-of-bound access and/or crashes.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 48aa30443e52c9666d5cd5e67532e475f212337e - < 5455a232edea6b946b99449f15ca771a8874a5a6affected 48aa30443e52c9666d5cd5e67532e475f212337e - < ed712dc0d64dee5f0d05e4d8ca57711f8a9c850caffected 48aa30443e52c9666d5cd5e67532e475f212337e - < 8a8a9fac9efa6423fd74938b940cb7d731780718 |
Linux | Linux | affected 6.18unaffected 0 - < 6.18unaffected 6.18.16 - <= 6.18.*unaffected 6.19.6 - <= 6.19.*unaffected 7.0 - <= * |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now