CVE & CISA-KEV Catalog

CVE-2026-43198

MEDIUM
4.8
CVSS v3
NVD

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late. After tcp_v4_syn_recv_sock(), the child socket is already visible from TCP ehash table and other cpus might use it. Since newinet->pinet6 is still pointing to the listener ipv6_pinfo bad things can happen as syzbot found. Move the problematic code in tcp_v6_mapped_child_init() and call this new helper from tcp_v4_syn_recv_sock() before the ehash insertion. This allows the removal of one tcp_sync_mss(), since tcp_v4_syn_recv_sock() will call it with the correct context.

CWE-362Race ConditionCWE-821

How to fix

Remediation Available
linuxDebian
Fixed in:6.19.6-1CVE-2026-43198
bpftoolRed Hat / RHEL
Fixed in:0:3.10.0-1160.155.1.el7.ppc64RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:4.18.0-477.150.1.el8_8RHSA-2026:35863
Fixed in:0:4.18.0-372.199.1.el8_6RHSA-2026:35894
Fixed in:0:4.18.0-553.140.1.el8_10RHSA-2026:36349
Fixed in:0:4.18.0-477.150.1.el8_8RHSA-2026:35863
bpftoolRocky
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7.ppc64RHSA-2026:36216
Fixed in:0:4.18.0-305.197.1.el8_4RHSA-2026:35896
Fixed in:0:4.18.0-372.199.1.el8_6RHSA-2026:35894
Fixed in:0:4.18.0-553.140.1.el8_10RHSA-2026:36349
Fixed in:0:4.18.0-553.140.1.el8_10RHSA-2026:36349
bpftool-debuginfoRocky
Fixed in:0:3.10.0-1160.155.1.el7.ppc64RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:4.18.0-477.150.1.el8_8RHSA-2026:35863
Fixed in:0:4.18.0-477.150.1.el8_8RHSA-2026:35863
Fixed in:0:4.18.0-372.199.1.el8_6RHSA-2026:35894
Fixed in:0:4.18.0-553.140.1.el8_10RHSA-2026:36349
bpftool-debuginfoRed Hat / RHEL
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7.ppc64RHSA-2026:36216
Fixed in:0:3.10.0-1160.155.1.el7RHSA-2026:36216
Fixed in:0:4.18.0-477.150.1.el8_8RHSA-2026:35863
Fixed in:0:4.18.0-305.197.1.el8_4RHSA-2026:35896
Fixed in:0:4.18.0-553.140.1.el8_10RHSA-2026:36349
Fixed in:0:4.18.0-553.140.1.el8_10RHSA-2026:36349
kernelRed Hat / RHEL
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
kernelRocky
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
kernel-64kRed Hat / RHEL
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
kernel-64kRocky
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
kernel-64k-coreRed Hat / RHEL
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
kernel-64k-coreRocky
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
kernel-64k-debugRed Hat / RHEL
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
kernel-64k-debugRocky
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
kernel-64k-debug-coreRocky
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
kernel-64k-debug-coreRed Hat / RHEL
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
kernel-64k-debug-debuginfoRocky
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
kernel-64k-debug-debuginfoRed Hat / RHEL
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
kernel-64k-debug-develRed Hat / RHEL
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
kernel-64k-debug-develRocky
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
kernel-64k-debug-devel-matchedRocky
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
kernel-64k-debug-devel-matchedRed Hat / RHEL
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
kernel-64k-debug-modulesRed Hat / RHEL
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
kernel-64k-debug-modulesRocky
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
kernel-64k-debug-modules-coreRocky
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
kernel-64k-debug-modules-coreRed Hat / RHEL
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
kernel-64k-debug-modules-extraRed Hat / RHEL
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
kernel-64k-debug-modules-extraRocky
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
kernel-64k-debuginfoRed Hat / RHEL
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
kernel-64k-debuginfoRocky
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
kernel-64k-develRocky
Fixed in:0:6.12.0-211.28.1.el10_2RHSA-2026:30129
Fixed in:0:6.12.0-55.84.1.el10_0RHSA-2026:33215
Fixed in:0:5.14.0-427.135.1.el9_4RHSA-2026:34443
Fixed in:0:5.14.0-284.179.1.el9_2RHSA-2026:36073
Fixed in:0:5.14.0-687.20.1.el9_8RHSA-2026:33285
Fixed in:0:5.14.0-570.125.1.el9_6RHSA-2026:34094

This vulnerability affects an unusually large number of packages. The highest-confidence fixes are shown above; the full list is longer. Check the referenced advisories for complete coverage.

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityLow
IntegrityLow
AvailabilityNone

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U

Exploit Intelligence

0.30%probability of exploitation in 30 days
22ndpercentile

Low risk: more likely to be exploited than 22% of all known CVEs.

References

Related Vulnerabilities

Other CWE-362 (Race Condition) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2024-6387High8.1100%-Fix
CVE-2023-36884High7.599%KEV + RansomFix
CVE-2018-15473Medium5.399%-Fix
CVE-2024-27983High8.287%-Fix
CVE-2014-0226Medium6.886%-Fix
CVE-2016-5195High7.084%KEVFix

Common questions

How do I fix CVE-2026-43198?

Published advisories record a fix for 389 affected products. The "How to fix" section on this page lists the fixed version and source advisory for each one, so apply the entry matching what you actually run.

Is CVE-2026-43198 being actively exploited?

Not that we know of. CVE-2026-43198 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 0.30% is the estimated probability that it will be exploited in the next 30 days. That is higher than 22% of all scored CVEs.

How severe is CVE-2026-43198?

CVE-2026-43198 has a CVSS v3 base score of 4.8, rated moderate. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.

What does CVE-2026-43198 affect?

Published advisories record a fix for linux (Debian), bpftool (Red Hat / RHEL), bpftool (Rocky), bpftool-debuginfo (Rocky), and 385 more. The list on this page is capped, so there may be more.

Embed a live status badge for CVE-2026-43198
CVE-2026-43198 severity badge

Markdown

[![CVE-2026-43198](https://tridentstack.com/cve/badge/CVE-2026-43198.svg)](https://tridentstack.com/cve/CVE-2026-43198)

HTML

<a href="https://tridentstack.com/cve/CVE-2026-43198"><img src="https://tridentstack.com/cve/badge/CVE-2026-43198.svg" alt="CVE-2026-43198"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it worksStart freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-07-20.