CVE-2026-43261 arm64: Add support for TSV110 Spectre-BHB mitigation

Medium 5.5 Published Updated

Attackers can exploit Spectre-BHB side channels on TSV110 processors to leak sensitive information from the Linux kernel.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2026-43261?

CVE-2026-43261 is a medium-severity vulnerability in Linux kernel, published on 6 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

arm64: Add support for TSV110 Spectre-BHB mitigation

The TSV110 processor is vulnerable to the Spectre-BHB (Branch History Buffer) attack, which can be exploited to leak information through branch prediction side channels. This commit adds the MIDR of TSV110 to the list for software mitigation.

Which versions are affected by CVE-2026-43261?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2026-43261?

Apply the vendor's patch.

Is CVE-2026-43261 being exploited?

There is no known exploitation of CVE-2026-43261 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as BELL-CVE-2026-43261, DEBIAN-CVE-2026-43261, GHSA-q2m9-5gr9-rjw9, ROOT-OS-DEBIAN-11-CVE-2026-43261, ROOT-OS-UBUNTU-2204-CVE-2026-43261, ROOT-OS-UBUNTU-2404-CVE-2026-43261 and 1 more.

Is CVE-2026-43261 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free