CVE-2026-43103: Linux kernel · net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 11 Nov 2026, 23:24 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- EPSS
- 0.1% chance of exploitation in 30 days – higher than 2% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 6 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 11 Nov 2026.
Description
In the Linux kernel, the following vulnerability has been resolved: net: lapbether: handle NETDEV_PRE_TYPE_CHANGE lapbeth_data_transmit() expects the underlying device type to be ARPHRD_ETHER. Returning NOTIFY_BAD from lapbeth_device_event() makes sure bonding driver can not break this expectation.
References
- git.kernel.org/stable/c/698642a01d53107ce9b3fc08bd801284af478a2b (opens in a new tab)
- git.kernel.org/stable/c/ffc5ed59f6dc87c51e8775f002619310225742e8 (opens in a new tab)
- git.kernel.org/stable/c/a10570973619cba9dfa6d723177251b846fae587 (opens in a new tab)
- git.kernel.org/stable/c/363a38044b8cd5b496d241651a1fb666e7c5fe3e (opens in a new tab)
- git.kernel.org/stable/c/328bb2cff5c2ed973f595ded769e15f4b7a117be (opens in a new tab)
- git.kernel.org/stable/c/63851f60781aa89258c8f0952cd13940aab0888e (opens in a new tab)
- git.kernel.org/stable/c/b117056768ab7deb434e7d72065e48d2083a0c2a (opens in a new tab)
- git.kernel.org/stable/c/b120e4432f9f56c7103133d6a11245e617695adb (opens in a new tab)