Skip to main content
CVE-2026-43503VulnerabilityPublished Updated

Red Hat Security Advisory: kernel security update

Affects Linux kernelSource GCVE Database

0
Compare

Mentioned vulnerabilities

Public exploit available (Metasploit).

Data as of 30 Oct 2026, 02:47 UTC

Severity
High

Rated by Threat Radar · No CVSS score from NVD or the CNA

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 21 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: evidence found.

    1 Metasploit module

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

AI-suggested

Red Hat has released updated kernel packages that fix these vulnerabilities. Users should apply the kernel update for Red Hat Enterprise Linux 9.6 Extended Update Support as detailed in the Red Hat advisory (https://access.redhat.com/articles/11258) and reboot affected systems to complete the remediation. No additional mitigation steps are indicated beyond applying the official patch and rebooting.

Description

Red Hat has issued a security advisory for a kernel update addressing multiple vulnerabilities in the Linux kernel. These include CVE-2026-46300, a local privilege escalation vulnerability related to a variant of the Dirty Frag vulnerability in the ESP/XFRM subsystem, and CVE-2026-46333, which allows unprivileged users to read root-owned files. The update is rated as important by Red Hat and requires a system reboot to take effect. Public exploit code is available via Metasploit for these vulnerabilities.

References

Community reviews

Loading reviews…