Skip to main content
CVE-2026-43495VulnerabilityPublished Updated

Bundesamt für Sicherheit in der Informationstechnik Amazon · Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Affects Bundesamt für Sicherheit in der Informationstechnik AmazonSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited : upgrade to 10.3 or 9.9 as a priority.

Data as of 30 Oct 2026, 11:52 UTC

Severity
Critical

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.3% chance of exploitation in 30 days – higher than 24% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 10.3, 9.9

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 21 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade Bundesamt für Sicherheit in der Informationstechnik Amazon to 10.3 or 9.9.

Affected software

ProductAffectedFixed in
Bundesamt für Sicherheit in der Informationstechnik AmazonAffected
  • >=9.0 <9.9
  • >=10.0 <10.3
  • Amazon
  • Amazon Linux 2
  • Debian
  • Debian Linux
  • Dell
Fixed in
  • 9.9
  • 10.3

AI-suggested

Security updates fixing these vulnerabilities are available from Red Hat for Red Hat Enterprise Linux 9 and 10. Systems should apply the kernel updates provided in advisories RHSA-2026:25191 and RHSA-2026:25217 and reboot to ensure the fixes take effect. No additional mitigation steps are specified by the vendor beyond applying these official patches.

Description

Multiple vulnerabilities affecting the Linux kernel have been identified, including use-after-free bugs and denial of service issues in various kernel components such as bonding driver, erofs filesystem, ALSA 6fire, ip6_tunnel, ipv6 routing, selinux overlayfs, and others. These vulnerabilities impact core Linux kernel functionality across several distributions including Red Hat Enterprise Linux 9 and 10. Security updates addressing these issues have been released by Red Hat and require system reboot to take effect.

References

Community reviews

Loading reviews…