VULNERABILITY INTELLIGENCE
CVE-2026-43474
CVSS score5.5 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-06-17
Description
In the Linux kernel, the following vulnerability has been resolved: fs: init flags_valid before calling vfs_fileattr_get syzbot reported a uninit-value bug in [1]. Similar to the "*get" context where the kernel's internal file_kattr structure is initialized before calling vfs_fileattr_get(), we s…