CVE-2026-43208
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
08/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: do not pass flow_id to set_rps_cpu()<br />
<br />
Blamed commit made the assumption that the RPS table for each receive<br />
queue would have the same size, and that it would not change.<br />
<br />
Compute flow_id in set_rps_cpu(), do not assume we can use the value<br />
computed by get_rps_cpu(). Otherwise we risk out-of-bound access<br />
and/or crashes.
Impact
Base Score 3.x
9.80
Severity 3.x
CRITICAL