Back to CVE records
Critical 9.8Published May 19, 2026
CVE-2026-43493crypto: pcrypt - Fix handling of MAY_BACKLOG requests
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications.
- CVSS
- 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before ae7e95638d956d556d74b9abb9e780d3bd3dcd9e; 5a1436beec5744029f3ac90b6fe71a698dcd6155 builds before 1d7f07df450bac3301938fbc4251f2611be4084e; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 76641449b28979ebd6c02e9598367e119e385236; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 9f1cbca178c03188e201ed175251372149bb25f2; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before eb34e243df57e32f4c08fa191f3602ea19076276; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 77d55bc8675ee851ed639dc9be77325a8024cf67; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 46271895ddfb1ba41f89f7e0dffbe9c2bcf7380a; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 915b692e6cb723aac658c25eb82c58fd81235110 | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | all versions | CISA ADP |
linux linux_kernel linux:linux_kernel | from 2.6.34 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.86; from 6.13 before 6.18.27; from 6.19 before 7.0.4 | NVD |
References
- https://git.kernel.org/stable/c/ae7e95638d956d556d74b9abb9e780d3bd3dcd9epatch
- https://git.kernel.org/stable/c/1d7f07df450bac3301938fbc4251f2611be4084epatch
- https://git.kernel.org/stable/c/76641449b28979ebd6c02e9598367e119e385236patch
- https://git.kernel.org/stable/c/9f1cbca178c03188e201ed175251372149bb25f2patch
- https://git.kernel.org/stable/c/eb34e243df57e32f4c08fa191f3602ea19076276patch
- https://git.kernel.org/stable/c/77d55bc8675ee851ed639dc9be77325a8024cf67patch
- https://git.kernel.org/stable/c/46271895ddfb1ba41f89f7e0dffbe9c2bcf7380apatch
- https://git.kernel.org/stable/c/915b692e6cb723aac658c25eb82c58fd81235110patch
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.