Medium 5.5Published May 6, 2026

CVE-2026-43103net: lapbether: handle NETDEV_PRE_TYPE_CHANGE

Updated under an hour ago (Oct 27, 2026, 4:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: lapbether: handle NETDEV_PRE_TYPE_CHANGE lapbeth_data_transmit() expects the underlying device type to be ARPHRD_ETHER. Returning NOTIFY_BAD from lapbeth_device_event() makes sure bonding driver can not break this expectation.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jun 1, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	872254dd6b1f80cb95ee9e2e22980888533fc293 builds before 698642a01d53107ce9b3fc08bd801284af478a2b; from 872254dd6b1f80cb95ee9e2e22980888533fc293 before ffc5ed59f6dc87c51e8775f002619310225742e8; from 872254dd6b1f80cb95ee9e2e22980888533fc293 before a10570973619cba9dfa6d723177251b846fae587; 872254dd6b1f80cb95ee9e2e22980888533fc293 builds before 363a38044b8cd5b496d241651a1fb666e7c5fe3e; 872254dd6b1f80cb95ee9e2e22980888533fc293 builds before 328bb2cff5c2ed973f595ded769e15f4b7a117be; 872254dd6b1f80cb95ee9e2e22980888533fc293 builds before 63851f60781aa89258c8f0952cd13940aab0888e; from 872254dd6b1f80cb95ee9e2e22980888533fc293 before b117056768ab7deb434e7d72065e48d2083a0c2a; from 872254dd6b1f80cb95ee9e2e22980888533fc293 before b120e4432f9f56c7103133d6a11245e617695adb	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.24 before 6.6.136; from 6.7 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; 7.0; 7.0; 7.0; 7.0; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/698642a01d53107ce9b3fc08bd801284af478a2b
https://git.kernel.org/stable/c/ffc5ed59f6dc87c51e8775f002619310225742e8
https://git.kernel.org/stable/c/a10570973619cba9dfa6d723177251b846fae587
https://git.kernel.org/stable/c/363a38044b8cd5b496d241651a1fb666e7c5fe3e	patch
https://git.kernel.org/stable/c/328bb2cff5c2ed973f595ded769e15f4b7a117be	patch
https://git.kernel.org/stable/c/63851f60781aa89258c8f0952cd13940aab0888e	patch
https://git.kernel.org/stable/c/b117056768ab7deb434e7d72065e48d2083a0c2a	patch
https://git.kernel.org/stable/c/b120e4432f9f56c7103133d6a11245e617695adb	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.