CVE-2026-43261

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: Add support for TSV110 Spectre-BHB mitigation

The TSV110 processor is vulnerable to the Spectre-BHB (Branch History Buffer) attack, which can be exploited to leak information through branch prediction side channels. This commit adds the MIDR of TSV110 to the list for software mitigation.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= e192c8baa69ac8a5585d61ac535aa1e5eb795e80, < 598c11dd4f4a9de31d854fcb9702f54c1c70f0d0; >= 4bbfd0c280254b273c564767021bb9b0f945148e, < a8d0ad5d990b050a6db74218a34b5529085e16b8; >= 558c303c9734af5a813739cd284879227f7297d2, < cccf96c49f61e47d9332d6a4d1c7fe9a2df44440; >= 558c303c9734af5a813739cd284879227f7297d2, < fd7e360845d331f542854d552469544182e61134; >= 558c303c9734af5a813739cd284879227f7297d2, < 5dbe1f14359735fa50ba0dd4a496125b5bc7f422; >= 558c303c9734af5a813739cd284879227f7297d2, < fd51d47fcacec3ca027eb65d8c44853d3b6cea95; >= 558c303c9734af5a813739cd284879227f7297d2, < ad0c356cae164ed5dbd1f4cfd438e46faa5292cb; >= 558c303c9734af5a813739cd284879227f7297d2, < e3baa5d4b361276efeb87b20d8beced451a7dbd5; 4dd8aae585a51a1d276911fe19096ad90144e9fe; 3e3904125fccd042fda24294624e8f66699fd06d; c20d551744797000c4af993f7d59ef8c69732949; 9013fd4bc958b33c3b4d5a2eaf4ded9857600395; 0b2bf1b37b5ebd90e69e30d8c2d6e1cd0c1f37b4; >= 5.10.105, < 5.10.252; >= 5.15.28, < 5.15.202; >= 4.9.310, < 4.10; >= 4.14.275, < 4.15; >= 4.19.236, < 4.20; >= 5.4.186, < 5.5; >= 5.16.14, < 5.17
LinuxLinux5.17

References

Timeline

Published
May 6, 2026
Last modified
Nov 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-432625.5In the Linux kernel, the following vulnerability has been resolved: gfs2: fiemap page fault fix In gfs2_fiemap(), we are calling iomap_fieCVE-2026-432637.8In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster WhCVE-2026-432645.5In the Linux kernel, the following vulnerability has been resolved: fbdev: of: display_timing: fix refcount leak in of_get_display_timings(CVE-2026-432655.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() CVE-2026-432665.5In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't go past the ARM processor CPER record buffer There's aCVE-2026-432675.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking DurCVE-2026-432685.5In the Linux kernel, the following vulnerability has been resolved: hfsplus: pretend special inodes as regular files Since commit af153bb6CVE-2026-432695.5In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callbackCVE-2026-43278.8The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 2.8.1. This is due to misCVE-2026-432705.5In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() In mtk_mdCVE-2026-432715.5In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in process_metadata_update ThCVE-2026-432725.5In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There i
CVE-2026-43261: Medium severity, CVSS 5.5 | Vulnix