CVE-2026-43261
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the Spectre-BHB (Branch History Buffer) attack, which can be exploited to leak information through branch prediction side channels. This commit adds the MIDR of TSV110 to the list for software mitigation.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-05-06 12:16:47.003000
Last modified
2026-11-06 16:18:30.310000
View original CVE JSON
{
"id": "CVE-2026-43261",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-05-06T12:16:47.003",
"lastModified": "2026-11-06T16:18:30.310",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: Add support for TSV110 Spectre-BHB mitigation\n\nThe TSV110 processor is vulnerable to the Spectre-BHB (Branch History\nBuffer) attack, which can be exploited to leak information through\nbranch prediction side channels. This commit adds the MIDR of TSV110\nto the list for software mitigation."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"arch/arm64/kernel/proton-pack.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "e192c8baa69ac8a5585d61ac535aa1e5eb795e80",
"lessThan": "598c11dd4f4a9de31d854fcb9702f54c1c70f0d0",
"versionType": "git",
"status": "affected"
},
{
"version": "4bbfd0c280254b273c564767021bb9b0f945148e",
"lessThan": "a8d0ad5d990b050a6db74218a34b5529085e16b8",
"versionType": "git",
"status": "affected"
},
{
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "cccf96c49f61e47d9332d6a4d1c7fe9a2df44440",
"versionType": "git",
"status": "affected"
},
{
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "fd7e360845d331f542854d552469544182e61134",
"versionType": "git",
"status": "affected"
},
{
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "5dbe1f14359735fa50ba0dd4a496125b5bc7f422",
"versionType": "git",
"status": "affected"
},
{
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "fd51d47fcacec3ca027eb65d8c44853d3b6cea95",
"versionType": "git",
"status": "affected"
},
{
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "ad0c356cae164ed5dbd1f4cfd438e46faa5292cb",
"versionType": "git",
"status": "affected"
},
{
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "e3baa5d4b361276efeb87b20d8beced451a7dbd5",
"versionType": "git",
"status": "affected"
},
{
"version": "4dd8aae585a51a1d276911fe19096ad90144e9fe",
"versionType": "git",
"status": "affected"
},
{
"version": "3e3904125fccd042fda24294624e8f66699fd06d",
"versionType": "git",
"status": "affected"
},
{
"version": "c20d551744797000c4af993f7d59ef8c69732949",
"versionType": "git",
"status": "affected"
},
{
"version": "9013fd4bc958b33c3b4d5a2eaf4ded9857600395",
"versionType": "git",
"status": "affected"
},
{
"version": "0b2bf1b37b5ebd90e69e30d8c2d6e1cd0c1f37b4",
"versionType": "git",
"status": "affected"
},
{
"version": "5.10.105",
"lessThan": "5.10.252",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.15.28",
"lessThan": "5.15.202",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.9.310",
"lessThan": "4.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.14.275",
"lessThan": "4.15",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.19.236",
"lessThan": "4.20",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.4.186",
"lessThan": "5.5",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.16.14",
"lessThan": "5.17",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"arch/arm64/kernel/proton-pack.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.17",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.17",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.252",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.202",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.165",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.128",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.75",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.16",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.19.6",
"lessThanOrEqual": "6.19.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.0",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-11-06T15:32:15.330551Z",
"id": "CVE-2026-43261",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.105",
"versionEndExcluding": "5.10.252",
"matchCriteriaId": "C2770DCE-CDE6-4088-B12D-5CE167E99137"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.202",
"matchCriteriaId": "4002FC2B-1456-4666-B240-0EBF590C4671"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.165",
"matchCriteriaId": "797C7F46-D0BE-4FB8-A502-C5EF8E6B6654"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.128",
"matchCriteriaId": "851E9353-6C09-4CC9-877E-E09DB164A3C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.12.75",
"matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.18.16",
"matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.19",
"versionEndExcluding": "6.19.6",
"matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/598c11dd4f4a9de31d854fcb9702f54c1c70f0d0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5dbe1f14359735fa50ba0dd4a496125b5bc7f422",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a8d0ad5d990b050a6db74218a34b5529085e16b8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ad0c356cae164ed5dbd1f4cfd438e46faa5292cb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cccf96c49f61e47d9332d6a4d1c7fe9a2df44440",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e3baa5d4b361276efeb87b20d8beced451a7dbd5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fd51d47fcacec3ca027eb65d8c44853d3b6cea95",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fd7e360845d331f542854d552469544182e61134",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}