Review reviewCritical

CVE-2026-43197

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: netconsole: avoid OOB reads, msg is not nul-terminated msg passed to netconsole from the console subsystem is not guaranteed to be nul-terminated. Before recent commit 7eab73b18630 ("netconsole: convert to NBCON console infrastructure") the message would be placed in printk_shared_pbufs, a static global buffer, so KASAN had harder time catching OOB accesses. Now we see: printk: console [netcon_ext0] enabled BUG: KASAN: slab-out-of-bounds in string+0x1f7/0x240 Read of size 1 at addr ffff88813b6d4c00 by task pr/netcon_ext0/59...

CVSS: 9.1
EPSS: -
CISA KEV: Not listed
Published: 2026.05.06

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 9.1

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= c62c0a17f9b7398022f9eebe547878033264f81f < 8fe132c4873f9eb1b86ddbf31216e9d961a0b8b9, >= c62c0a17f9b7398022f9eebe547878033264f81f < 3126a2f98beaec5a554a1fb31c46db1e8542665e, >= c62c0a17f9b7398022f9eebe547878033264f81f < 74ab1456eaa3b2eb986138f9e1f4cb37e73b6f58, >= c62c0a17f9b7398022f9eebe547878033264f81f < 82aec772fca2223bc5774bd9af486fd95766e578, >= 6.6 < 6.18.16, >= 6.19 < 6.19.6, 7.0
Fixed versions: 6.18.16, 6.19.6

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CWE: CWE-125