Threats Tagged 'cve-2026-43083'

A high severity vulnerability (CVE-2026-43083) in the Linux kernel's ioam6 networking code could lead to out-of-bounds memory access and missing locking, potentially causing system instability or denial of service. The flaw occurs when processing packets on the RX path if the ingress device has more RX queues than the egress device has TX queues, leading to an unchecked index access. This issue has been fixed in Linux kernel versions 6.17.0-1026.26 and later. Ubuntu has released security updates addressing this and other kernel vulnerabilities, requiring a system reboot and recompilation of third-party kernel modules due to ABI changes.

Multiple vulnerabilities have been identified in the Linux kernel, which is the core component of the Linux operating system. These vulnerabilities are cataloged under CVE-2026-43059 and are associated with the CWE-416 category (Use After Free). The affected products include various Linux distributions such as Amazon Linux 2 and Debian Linux, as well as Google-related Linux environments. No specific technical details or CVSS scores are provided, and there are no known exploits in the wild at this time.

CVE-2026-43083 is a vulnerability in Microsoft software version 3.0 related to the net: ioam6 component, involving an out-of-bounds (OOB) condition and a missing lock. The vulnerability details are limited, with no CVSS score or exploit reports available. The affected version is explicitly stated as 3.0. No patch or remediation information is provided in the available data.