CVE-2026-43089

Published: May 6, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding hole after the proto field, which ends up never getting set to zero before copying out to userspace. Fix that up by zeroing out the whole structure before setting individual variables.

Affected (11)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.29.1 to 6.6.136
Linux Linux Kernel	From 6.13 to 6.18.24
Linux Linux Kernel	From 6.19 to 6.19.14
Linux Linux Kernel	From 6.7 to 6.12.83
Linux Linux Kernel	Version 7.0 rc1
Linux Linux Kernel	Version 7.0 rc2
Linux Linux Kernel	Version 7.0 rc3
Linux Linux Kernel	Version 7.0 rc4
Linux Linux Kernel	Version 7.0 rc5
Linux Linux Kernel	Version 7.0 rc6
Linux Linux Kernel	Version 7.0 rc7