01 Record

CVE-2026-43071

dcache: Limit the minimal number of bucket to two

CriticalPUBLISHEDCNA: Linux

CNA base score9.1 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

View raw JSON

02 Description

dcache: Limit the minimal number of bucket to two

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.45% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 39.4% of scored records. A rank, not a probability.

NVD base score

9.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-10-19.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-05 15:29Z5 MO AGO

Last updated

2026-10-19 19:06Z9 DAYS AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.1)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase
CWE-823Use of Out-of-range Pointer OffsetBase

Data version

5.2

Document digest

b1b08d2b9a59a1f5a0b3bc3b68eef9f438a374e7fc222b807330c6e9ddcc3e50

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux99d263d4c5b2f541dfacb5391e22e8c91ea982a6 to < 45b06bb5ea96f75ad81d7ef446f832ea6b0026fe, 99d263d4c5b2f541dfacb5391e22e8c91ea982a6 to < 426ef05e82ee52c8d0e95fc0808b7383d8352d73, 99d263d4c5b2f541dfacb5391e22e8c91ea982a6 to < ddd57ebce245f9c7e2f6902a6c087d6186d2385d, 99d263d4c5b2f541dfacb5391e22e8c91ea982a6 to < 755b40903eff563768d4d96fd4ef51ec48adde3b, 99d263d4c5b2f541dfacb5391e22e8c91ea982a6 to < 5718df131ab78897a9dd1f2e71c3ba732d4392af, 99d263d4c5b2f541dfacb5391e22e8c91ea982a6 to < 277cedabb0ab86baae83fa58218be13c6d3e5526, 99d263d4c5b2f541dfacb5391e22e8c91ea982a6 to < f08fe8891c3eeb63b73f9f1f6d97aa629c821579, d4c96061fddd129778ce8b70fb093aa532f422d0, be2378cbffe50ce0161f0fdee914adee98af53dc, a8be8af18485f9fade90e1743d940252a39eec84, b5cf3193759f7cd1cfbeef11f5cf067bbce22e55, 3.10.55 to < 3.11, 3.12.29 to < 3.13, 3.14.19 to < 3.15, 3.16.3 to < 3.17, 3.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/45b06bb5ea96f75ad81d7ef446f832ea6b0026fe
git.kernel.orghttps://git.kernel.org/stable/c/426ef05e82ee52c8d0e95fc0808b7383d8352d73
git.kernel.orghttps://git.kernel.org/stable/c/ddd57ebce245f9c7e2f6902a6c087d6186d2385d
git.kernel.orghttps://git.kernel.org/stable/c/755b40903eff563768d4d96fd4ef51ec48adde3b
git.kernel.orghttps://git.kernel.org/stable/c/5718df131ab78897a9dd1f2e71c3ba732d4392af
git.kernel.orghttps://git.kernel.org/stable/c/277cedabb0ab86baae83fa58218be13c6d3e5526
git.kernel.orghttps://git.kernel.org/stable/c/f08fe8891c3eeb63b73f9f1f6d97aa629c821579
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-457936.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-784472.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.176-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.85-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.19.14-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.