# net: skbuff: propagate shared-frag marker through frag-transfer helpers

CVE record · `CVE-2026-43503`

- **Identifiers:** `CVE-2026-43503`
- **State:** Confirmed
- **Severity:** CVSS 8.8 High
- **Critical:** No
- **CNA:** Linux
- **Weakness (CWE):** [CWE-664](https://cwe.mitre.org/data/definitions/664.html) · [CWE-691](https://cwe.mitre.org/data/definitions/691.html)
- **Tags:** [CWE-664](https://agentprime.io/advisories/tag/cwe-664.md) · [CWE-691](https://agentprime.io/advisories/tag/cwe-691.md)
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 23 May 2026
- **Updated:** 16 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 23 May 2026, 11:44 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before fbeab9555564a1b98e8582cd106dfe46c4606991` (git)
  - affected: `cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 179f1852bdedc300e373e807cc102cd81feff196` (git)
  - affected: `cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 12401fcfb01f53ccc63ab0a3246570fe8f3105ee` (git)
  - affected: `cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 989214c66884d70716d83dc1d0bf5e16287bf349` (git)
  - affected: `cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before fc6eb39c55e97df2f94ad974b8a5bbcd019da2c8` (git)
  - affected: `cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before ff375cc75f9167168db38e0464a482d5fbc8d81d` (git)
  - affected: `cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 9bc9d6d6967a2239aa57af2aa53554eddd640d20` (git)
  - affected: `cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 48f6a5356a33dd78e7144ae1faef95ffc990aae0` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `3.9`
  - unaffected: `before 3.9` (semver)
  - unaffected: `5.10.257 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.208 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.174 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.141 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.91 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.33 to 6.18.*, inclusive` (semver)
  - unaffected: `7.0.10 to 7.0.*, inclusive` (semver)
  - unaffected: `7.1 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 8.8 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`, from CNA (Linux) (used for this record)
- 7.0 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`, from ADP (redhat-SADP)

- **CISA KEV:** Not listed.
- **EPSS:** 0.020, the 80th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 23 May 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-43503](https://www.cve.org/CVERecord?id=CVE-2026-43503)
- [NVD: CVE-2026-43503](https://nvd.nist.gov/vuln/detail/CVE-2026-43503)

### References from the CNA

- <https://git.kernel.org/stable/c/fbeab9555564a1b98e8582cd106dfe46c4606991>
- <https://git.kernel.org/stable/c/179f1852bdedc300e373e807cc102cd81feff196>
- <https://git.kernel.org/stable/c/12401fcfb01f53ccc63ab0a3246570fe8f3105ee>
- <https://git.kernel.org/stable/c/989214c66884d70716d83dc1d0bf5e16287bf349>
- <https://git.kernel.org/stable/c/fc6eb39c55e97df2f94ad974b8a5bbcd019da2c8>
- <https://git.kernel.org/stable/c/ff375cc75f9167168db38e0464a482d5fbc8d81d>
- <https://git.kernel.org/stable/c/9bc9d6d6967a2239aa57af2aa53554eddd640d20>
- <https://git.kernel.org/stable/c/48f6a5356a33dd78e7144ae1faef95ffc990aae0>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-43503>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-43503/>. Everything for agents: <https://agentprime.io/llms.txt>.