CVE-2026-43474: fs: init flags_valid before calling vfs_fileattr_get
Published May 8, 2026
·Updated
fs: init flagsvalid before calling vfsfileattrget
Affected Software
5 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.137.1-2
Linux Linux kernel>=6.17<6.18.19
Linux Linux kernel>=6.19<6.19.9
Linux Linux kernel=7.0-rc1
Remediation
Event History
May 8, 2026
CVE Published
via MITRE·02:22 PM
Data Sourced
via MITRE·02:22 PM
Description
Data Sourced
via NVD·03:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 9, 2026
Data Sourced
via Microsoft·08:01 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:01 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-43474?
The severity of CVE-2026-43474 is classified as moderate due to the potential for information leakage.
2
How do I fix CVE-2026-43474?
To fix CVE-2026-43474, update the Linux kernel to the latest stable version where the vulnerability has been patched.
3
What systems are affected by CVE-2026-43474?
CVE-2026-43474 affects the Linux kernel and any systems utilizing vulnerable versions.
4
What is the impact of CVE-2026-43474?
The impact of CVE-2026-43474 includes the risk of uninitialized value bugs leading to potential security issues.
5
Is there any known exploit for CVE-2026-43474?
As of now, no public exploits have been reported for CVE-2026-43474.