Use After Free in Linux
CVE-2026-43076
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline data i_size during inode read When reading an inode from disk, ocfs2_validate_inode_block() performs various sanity checks but does not validate t…
Vulnerability class: Use-After-Free
EPSS: 0.000 (2.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 6.6.136, 6.18.24, 23193e513d1cd69411469f028d56fd175d4a6b07
- Linux Linux_kernel — versions 2.6.24, 7.0
Weakness classification (CWE)
References
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Frequently asked questions
- What is CVE-2026-43076?
- CVE-2026-43076 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2026-05-06.
- How severe is CVE-2026-43076?
- High severity. CVSS v3 base score is 7.8 out of 10.