CVE-2026-43071
A flaw in the Linux kernel’s dentry hash table can cause an out‑of‑bounds read when the hash bucket count is set to one. The issue has been fixed by ensuring the table always has at least two buckets. The patch prevents kernel crashes and potential privilege escalation.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
All Linux kernel versions, including 3.17 and later, that do not contain the patch that limits the dentry_hashtable to a minimum of two buckets.
Real-world impact
An attacker could trigger a kernel crash or, in some scenarios, gain elevated privileges by exploiting the out‑of‑bounds read in the dentry hash table.
Why this severity
The CVSS score of 9.1 reflects that the vulnerability can be exploited remotely without authentication, requires no user interaction, and has a high impact on confidentiality and availability.
What to do about it
- 01Update the Linux kernel to a version that includes the patch limiting the dentry_hashtable to at least two buckets.
- 02Reboot the system to load the updated kernel.
NVD description
Timeline
- May 5, 2026 · May 5, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 29, 2026 · 6d agoAdvisory updatedThe NVD record was last revised.
- Jul 29, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/277cedabb0ab86baae…patch
- git.kernel.org/stable/c/426ef05e82ee52c8d0…patch
- git.kernel.org/stable/c/45b06bb5ea96f75ad8…patch
- git.kernel.org/stable/c/5718df131ab78897a9…patch
- git.kernel.org/stable/c/755b40903eff563768…patch
- git.kernel.org/stable/c/ddd57ebce245f9c7e2…patch
- git.kernel.org/stable/c/f08fe8891c3eeb63b7…patch