CVE-2026-43099 (GCVE-0-2026-43099)

Vulnerability from cvelistv5 – Published: 2026-05-06 07:40 – Updated: 2026-08-05 12:25
VLAI
Title
ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_probe() ipv6_stub->ipv6_dev_find() may return ERR_PTR(-EAFNOSUPPORT) when the IPv6 stack is not active (CONFIG_IPV6=m and not loaded), and passing this error pointer to dev_hold() will cause a kernel crash with null-ptr-deref. Instead, silently discard the request. RFC 8335 does not appear to define a specific response for the case where an IPv6 interface identifier is syntactically valid but the implementation cannot perform the lookup at runtime, and silently dropping the request may safer than misreporting "No Such Interface".
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: d329ea5bd8845f0b196bf41b18b6173340d6e0e4 , < 0f21bc261e60f0c696c58841c4873ff77ed83673 (git)
Affected: d329ea5bd8845f0b196bf41b18b6173340d6e0e4 , < dc5db4db19766a61ad65d81d1f55b1c1e51ba78d (git)
Affected: d329ea5bd8845f0b196bf41b18b6173340d6e0e4 , < 47a8bf52156ac7e7a581eca31c1f964ba4258d4d (git)
Affected: d329ea5bd8845f0b196bf41b18b6173340d6e0e4 , < 6be325206850a0891896d38bcf83a09d8b54ec48 (git)
Affected: d329ea5bd8845f0b196bf41b18b6173340d6e0e4 , < f91b3ed9e7fa82a70511b5f6901c88379acf2964 (git)
Affected: d329ea5bd8845f0b196bf41b18b6173340d6e0e4 , < 5b9911582d441f72fe6ccb15ffe3303bbc07f6f5 (git)
Affected: d329ea5bd8845f0b196bf41b18b6173340d6e0e4 , < fde29fd9349327acc50d19a0b5f3d5a6c964dfd8 (git)
Create a notification for this product.
Linux Linux Affected: 5.13
Unaffected: 0 , < 5.13 (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.136 , ≤ 6.6.* (semver)
Unaffected: 6.12.83 , ≤ 6.12.* (semver)
Unaffected: 6.18.24 , ≤ 6.18.* (semver)
Unaffected: 6.19.14 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/icmp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0f21bc261e60f0c696c58841c4873ff77ed83673",
              "status": "affected",
              "version": "d329ea5bd8845f0b196bf41b18b6173340d6e0e4",
              "versionType": "git"
            },
            {
              "lessThan": "dc5db4db19766a61ad65d81d1f55b1c1e51ba78d",
              "status": "affected",
              "version": "d329ea5bd8845f0b196bf41b18b6173340d6e0e4",
              "versionType": "git"
            },
            {
              "lessThan": "47a8bf52156ac7e7a581eca31c1f964ba4258d4d",
              "status": "affected",
              "version": "d329ea5bd8845f0b196bf41b18b6173340d6e0e4",
              "versionType": "git"
            },
            {
              "lessThan": "6be325206850a0891896d38bcf83a09d8b54ec48",
              "status": "affected",
              "version": "d329ea5bd8845f0b196bf41b18b6173340d6e0e4",
              "versionType": "git"
            },
            {
              "lessThan": "f91b3ed9e7fa82a70511b5f6901c88379acf2964",
              "status": "affected",
              "version": "d329ea5bd8845f0b196bf41b18b6173340d6e0e4",
              "versionType": "git"
            },
            {
              "lessThan": "5b9911582d441f72fe6ccb15ffe3303bbc07f6f5",
              "status": "affected",
              "version": "d329ea5bd8845f0b196bf41b18b6173340d6e0e4",
              "versionType": "git"
            },
            {
              "lessThan": "fde29fd9349327acc50d19a0b5f3d5a6c964dfd8",
              "status": "affected",
              "version": "d329ea5bd8845f0b196bf41b18b6173340d6e0e4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/icmp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.136",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.136",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.83",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.24",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.14",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: icmp: fix null-ptr-deref in icmp_build_probe()\n\nipv6_stub-\u003eipv6_dev_find() may return ERR_PTR(-EAFNOSUPPORT) when the\nIPv6 stack is not active (CONFIG_IPV6=m and not loaded), and passing\nthis error pointer to dev_hold() will cause a kernel crash with\nnull-ptr-deref.\n\nInstead, silently discard the request. RFC 8335 does not appear to\ndefine a specific response for the case where an IPv6 interface\nidentifier is syntactically valid but the implementation cannot perform\nthe lookup at runtime, and silently dropping the request may safer than\nmisreporting \"No Such Interface\"."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable path is reached by an inbound IPv4 ICMP Extended Echo request processed by the kernel network stack. A remote host can send such ICMP packets to a target that has RFC 8335 probe replies enabled.\nAC:L - In the vulnerable deployment, a single well-formed ICMP probe with an IPv6 address identifier deterministically reaches the bad `dev_hold()` call. There is no race, heap shaping, or attacker-uncontrolled timing requirement.\nPR:N - The packet is processed before any authentication and does not require a local account or kernel capability from the attacker. The sysctl is a target configuration gate, not an attacker privilege requirement.\nUI:N - No victim user action is needed after the target is configured to answer ICMP probes. The attacker only sends a network packet.\nS:U - The impact is within the same kernel/network stack security authority. It does not cross a VM, sandbox, or hardware isolation boundary.\nC:N - The bug is an ERR_PTR/NULL-style dereference in `dev_hold()`, causing an oops rather than an information disclosure primitive. I found no evidence of attacker-controlled memory read.\nI:N - The invalid pointer is dereferenced for a reference count operation and is not a controllable write to a valid attacker-chosen object. This is a crash-only condition, not memory corruption enabling integrity modification.\nA:H - The invalid pointer dereference can crash the kernel, causing a high-impact denial of service. It is remotely repeatable against affected and configured systems."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:25:54.285Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0f21bc261e60f0c696c58841c4873ff77ed83673"
        },
        {
          "url": "https://git.kernel.org/stable/c/dc5db4db19766a61ad65d81d1f55b1c1e51ba78d"
        },
        {
          "url": "https://git.kernel.org/stable/c/47a8bf52156ac7e7a581eca31c1f964ba4258d4d"
        },
        {
          "url": "https://git.kernel.org/stable/c/6be325206850a0891896d38bcf83a09d8b54ec48"
        },
        {
          "url": "https://git.kernel.org/stable/c/f91b3ed9e7fa82a70511b5f6901c88379acf2964"
        },
        {
          "url": "https://git.kernel.org/stable/c/5b9911582d441f72fe6ccb15ffe3303bbc07f6f5"
        },
        {
          "url": "https://git.kernel.org/stable/c/fde29fd9349327acc50d19a0b5f3d5a6c964dfd8"
        }
      ],
      "title": "ipv4: icmp: fix null-ptr-deref in icmp_build_probe()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43099",
    "datePublished": "2026-05-06T07:40:29.567Z",
    "dateReserved": "2026-05-01T14:12:55.984Z",
    "dateUpdated": "2026-08-05T12:25:54.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43099",
      "date": "2026-08-11",
      "epss": "0.0049",
      "percentile": "0.39625"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43099\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-06T10:16:23.400\",\"lastModified\":\"2026-06-17T10:48:56.063\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nipv4: icmp: fix null-ptr-deref in icmp_build_probe()\\n\\nipv6_stub-\u003eipv6_dev_find() may return ERR_PTR(-EAFNOSUPPORT) when the\\nIPv6 stack is not active (CONFIG_IPV6=m and not loaded), and passing\\nthis error pointer to dev_hold() will cause a kernel crash with\\nnull-ptr-deref.\\n\\nInstead, silently discard the request. RFC 8335 does not appear to\\ndefine a specific response for the case where an IPv6 interface\\nidentifier is syntactically valid but the implementation cannot perform\\nthe lookup at runtime, and silently dropping the request may safer than\\nmisreporting \\\"No Such Interface\\\".\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ipv4/icmp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"d329ea5bd8845f0b196bf41b18b6173340d6e0e4\",\"lessThan\":\"0f21bc261e60f0c696c58841c4873ff77ed83673\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d329ea5bd8845f0b196bf41b18b6173340d6e0e4\",\"lessThan\":\"dc5db4db19766a61ad65d81d1f55b1c1e51ba78d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d329ea5bd8845f0b196bf41b18b6173340d6e0e4\",\"lessThan\":\"47a8bf52156ac7e7a581eca31c1f964ba4258d4d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d329ea5bd8845f0b196bf41b18b6173340d6e0e4\",\"lessThan\":\"6be325206850a0891896d38bcf83a09d8b54ec48\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d329ea5bd8845f0b196bf41b18b6173340d6e0e4\",\"lessThan\":\"f91b3ed9e7fa82a70511b5f6901c88379acf2964\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d329ea5bd8845f0b196bf41b18b6173340d6e0e4\",\"lessThan\":\"5b9911582d441f72fe6ccb15ffe3303bbc07f6f5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d329ea5bd8845f0b196bf41b18b6173340d6e0e4\",\"lessThan\":\"fde29fd9349327acc50d19a0b5f3d5a6c964dfd8\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ipv4/icmp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.13\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.13\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.136\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.83\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.24\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.14\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.13\",\"versionEndExcluding\":\"6.6.136\",\"matchCriteriaId\":\"1CA556B4-5EB8-4B96-AEEA-6BDC9CC8BF90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.83\",\"matchCriteriaId\":\"7F0AE5B5-23AC-4DCC-B37A-51CA1DAE7BA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.24\",\"matchCriteriaId\":\"8126B8B8-6D0B-4443-86C1-672AEE893555\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.14\",\"matchCriteriaId\":\"D6A8A074-BBF4-4803-ABED-519A839435BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"02259FDA-961B-47BC-AE7F-93D7EC6E90C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"58A9FEFF-C040-420D-8F0A-BFDAAA1DF258\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D2315C0-D46F-4F85-9754-F9E5E11374A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"512EE3A8-A590-4501-9A94-5D4B268D6138\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0f21bc261e60f0c696c58841c4873ff77ed83673\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/47a8bf52156ac7e7a581eca31c1f964ba4258d4d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5b9911582d441f72fe6ccb15ffe3303bbc07f6f5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6be325206850a0891896d38bcf83a09d8b54ec48\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dc5db4db19766a61ad65d81d1f55b1c1e51ba78d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f91b3ed9e7fa82a70511b5f6901c88379acf2964\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fde29fd9349327acc50d19a0b5f3d5a6c964dfd8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T17:16:53+00:00",
      "cve": "CVE-2026-43099",
      "id": "CVE-2026-43099",
      "initial_release_date": "2026-05-06T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ipv4: icmp: fix null-ptr-deref in icmp_build_probe()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43099.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-06T01:21:34Z",
      "cve": "CVE-2026-43099",
      "id": "CVE-2026-43099",
      "initial_release_date": "2026-05-07T02:18:34Z",
      "product_status:known_affected": "202",
      "product_status:known_not_affected": "93",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43099",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43099.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.