CVE-2026-43208
published 2026-05-06CVE-2026-43208: In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to set_rps_cpu() Blamed commit made the assumption that the RPS…
PriorityP345critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.48%
38.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: do not pass flow_id to set_rps_cpu()
Blamed commit made the assumption that the RPS table for each receive
queue would have the same size, and that it would not change.
Compute flow_id in set_rps_cpu(), do not assume we can use the value
computed by get_rps_cpu(). Otherwise we risk out-of-bound access
and/or crashes.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 48aa30443e52c9666d5cd5e67532e475f212337e < 5455a232edea6b946b99449f15ca771a8874a5a6 | 5455a232edea6b946b99449f15ca771a8874a5a6 |
| linux | linux | >= 48aa30443e52c9666d5cd5e67532e475f212337e < ed712dc0d64dee5f0d05e4d8ca57711f8a9c850c | ed712dc0d64dee5f0d05e4d8ca57711f8a9c850c |
| linux | linux | >= 48aa30443e52c9666d5cd5e67532e475f212337e < 8a8a9fac9efa6423fd74938b940cb7d731780718 | 8a8a9fac9efa6423fd74938b940cb7d731780718 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 6.18 < 6.18.16 | 6.18.16 |
| linux | linux_kernel | >= 6.19 < 6.19.6 | 6.19.6 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6cq8-8cqv-fh6c: In the Linux kernel, the following vulnerability has been resolved:
net: do not pass flow_id to set_rps_cpu()
Blamed commit made the assumption that
ghsa_unreviewed·2026-05-06
CVE-2026-43208 GHSA-6cq8-8cqv-fh6c: In the Linux kernel, the following vulnerability has been resolved:
net: do not pass flow_id to set_rps_cpu()
Blamed commit made the assumption that
In the Linux kernel, the following vulnerability has been resolved:
net: do not pass flow_id to set_rps_cpu()
Blamed commit made the assumption that the RPS table for each receive
queue would have the same size, and that it would not change.
Compute flow_id in set_rps_cpu(), do not assume we can use the value
computed by get_rps_cpu(). Otherwise we risk out-of-bound access
and/or crashes.
Red Hat
kernel: net: do not pass flow_id to set_rps_cpu()
vendor_redhat·2026-05-06·CVSS 7.0
CVE-2026-43208 [HIGH] CWE-805 kernel: net: do not pass flow_id to set_rps_cpu()
kernel: net: do not pass flow_id to set_rps_cpu()
A flaw was found in the Linux kernel's networking component. An incorrect assumption about the size and immutability of the Receive Packet Steering (RPS) table could lead to an out-of-bounds memory access. This vulnerability, occurring during the computation of `flow_id` in the `set_rps_cpu()` function, could result in system crashes or other unpredictable behavior, potentially leading to a Denial of Service (DoS).
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Under investigation
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kern
No detection rules found.
No public exploits indexed.
2026-05-06
Published