CVE-2026-43208
Gravedad CVSS v3.1:
CRÍTICA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/05/2026
Última modificación:
08/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: do not pass flow_id to set_rps_cpu()<br />
<br />
Blamed commit made the assumption that the RPS table for each receive<br />
queue would have the same size, and that it would not change.<br />
<br />
Compute flow_id in set_rps_cpu(), do not assume we can use the value<br />
computed by get_rps_cpu(). Otherwise we risk out-of-bound access<br />
and/or crashes.
Impacto
Puntuación base 3.x
9.80
Gravedad 3.x
CRÍTICA