Elevation of privilege vulnerability affecting the Linux kernel

The Linux kernel is the central component of Linux operating systems that orchestrates communication between hardware and software and allows resource management to ensure system stability and security. This component is affected by a vulnerability labeled CVE-2026-43284 which results from the mishandling of shared memory pages when using the MSG_SPLICE_PAGES functionality. It would allow an authenticated malicious actor to corrupt memory and obtain administrative rights on the system. This vulnerability is classified as high with a severity score of 7.8 according to CVSS V3.1.

• Linux kernels from:;
• version 4.11 and earlier than 5.10.254;
• version 5.12 and earlier than 5.15.204;
• version 5.16 and earlier than 6.1.170;
• version 6.2 and earlier than 6.6.137;
• version 6.7 and earlier than 6.12.86;
• version 6.13 and earlier than 6.18.27;
• version 7.0 and earlier than 7.0.4;

RECOMMENDED ACTIONS:

• Update Linux kernel to versions 5.10.255, 5.15.205, 6.1.171, 6.6.138, 6.12.87, 6.18.28, 7.0.5 or later;
• Immediately apply security patches released by your distribution's publishers;