Skip to content
OpenAdvisories
High ICSA-26-225-04 2 CVEs

Hitachi Energy APM Edge Product

Published Jul 28, 2026 · Updated Aug 13, 2026 · Revision 2

Vendor: Hitachi Energy Product: APM Edge

Summary

Hitachi Energy is aware of Dirty Frag vulnerabilities that affect APM Edge product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

Vulnerabilities 2

  • High 8.8
    CVE-2026-43284 Public exploit EPSS 94%

    xfrm: esp: avoid in-place decrypt on shared skb frags

    In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter()…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-43500 Public exploit EPSS 94%

    rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

    In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpc_input_call_event() and the RESPONSE handler in rxrpc_verify_response() copy the skb to …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #2

    Initial CISA Republication of Hitachi Energy PSIRT 8DBD000256 advisory

  2. #1

    Initial public release

References