VDB

TNCVE-2026-43089

TNCVE-2026-43089 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding hole after the proto field, which ends up never getting set to zero before copying out to userspace. Fix that up by zeroing out the whole structure before setting individual variables.

Timeline

  • May 6, 2026 CVE Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›