What is CVE-2026-43051?

CVE-2026-43051 is a High severity Linux kernel vulnerability with a CVSS score of 8.1 out of 10, classified as a Out-of-bounds Read flaw (CWE-125), affecting Linux kernel versions from 3.3 onward and patched in 5.10.253, 5.15.203, 6.1.168 and others. CVE-2026-43051 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-43051?

CVE-2026-43051 has a CVSS score of 8.1 out of 10, rated High severity. The vector string is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.

Is there a patch available for CVE-2026-43051?

Yes, CVE-2026-43051 has been patched. Fixed versions include 5.10.253, 5.15.203, 6.1.168 and others. If you are running Linux kernel 3.3 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-43051 actively exploited?

CVE-2026-43051 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Out-of-bounds Read (CWE-125)?

The product reads data past the end or before the beginning of the intended buffer. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/125.html

CVE-2026-43051

High

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq The wacom_intuos_bt_irq() function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short report can trigger an out-of-bounds read when copying data into the wacom structure. Specifically, report 0x03 requires at least 22 bytes to safely read the processed data and battery status, while report 0x04 (which falls through to 0x03) requires 32 bytes. Add explicit length checks for these report IDs and log a warning if a short report is received.

Package Linux Kernel

Published 2026-05-01

Last modified 2026-05-07

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

8.1

out of 10

High

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness type

CWE-125

CVE-2026-43051 is a Out-of-bounds Read vulnerability

What is Out-of-bounds Read?

The product reads data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE

Affected versions

Linux kernel versions 3.3 and later are affected. Fixed in 5.10.253, 5.15.203, 6.1.168, 6.6.134, 6.12.81, 6.18.22, 6.19.12, 7.0 and their respective stable series.

Affected from

≥ 3.3

Fixed in

✓ 5.10.253 5.10.x ✓ 5.15.203 5.15.x ✓ 6.1.168 6.1.x ✓ 6.6.134 6.6.x ✓ 6.12.81 6.12.x ✓ 6.18.22 6.18.x ✓ 6.19.12 6.19.x ✓ 7.0

References

8 total

Kernel Git
https://git.kernel.org/stable/c/2f1763f62909ccb6386ac50350fa0abbf5bb16a9

Patch
Kernel Git
https://git.kernel.org/stable/c/3d78386b144453c47e81bf62dc3601b757f02d99

Patch
Kernel Git
https://git.kernel.org/stable/c/41026bcc0fdf82605205c27935ef719cbc07193b

Patch
Kernel Git
https://git.kernel.org/stable/c/5b5b9730111808410e404ceac2fabd32eef92fbd

Patch
Kernel Git
https://git.kernel.org/stable/c/8bd690ac1242332c73cba10dacdad6c6642bbb94

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2026-43051

Severity High

CVSS score 8.1 / 10

CVSS version 3.1

Published 2026-05-01

Modified 2026-05-07

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-43051?

CVE-2026-43051 is a High severity Linux kernel vulnerability with a CVSS score of 8.1 out of 10 , classified as an Out-of-bounds Read flaw (CWE-125) . It affects Linux kernel versions from 3.3 onward and has been patched in 5.10.253, 5.15.203, 6.1.168 and others. CVE-2026-43051 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-43051?

CVE-2026-43051 has a CVSS score of 8.1 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.
Is there a patch available for CVE-2026-43051?

Yes. CVE-2026-43051 has been patched. Fixed versions include 5.10.253, 5.15.203, 6.1.168 and others. If you are running Linux kernel 3.3 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-43051 actively exploited?

No. CVE-2026-43051 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.