Tracker / CVE-2026-43089
CVE-2026-43089
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding hole after the proto field, which ends up never getting set to zero before copying out to userspace. Fix that up by zeroing out the whole structure before setting individual variables.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 2.6.29.1 → 6.6.136 |
| linux | linux_kernel · 6.13 → 6.18.24 |
| linux | linux_kernel · 6.19 → 6.19.14 |
| linux | linux_kernel · 6.7 → 6.12.83 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.