CVE-2026-43383

Summary

In the Linux kernel, the following vulnerability has been resolved:

net/tcp-md5: Fix MAC comparison to be constant-time

To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxcfb6eeb4c860592edd123fdea908d23c6ad1c7dc < 821c8751fdeecdeecabeb11704dd33439c9e4bbcaffected
LinuxLinuxcfb6eeb4c860592edd123fdea908d23c6ad1c7dc < ff44ec94d4fc8348600a69de0a8fa1102c23bce8affected
LinuxLinuxcfb6eeb4c860592edd123fdea908d23c6ad1c7dc < 345a9530756528d7ca407663d659c3c40e75c3ddaffected
LinuxLinuxcfb6eeb4c860592edd123fdea908d23c6ad1c7dc < 5d305a95130a8d08b9545e47f1e18d29d59866cbaffected
LinuxLinuxcfb6eeb4c860592edd123fdea908d23c6ad1c7dc < 02669e2a4d207068edce7e8b5fafd85822018ce6affected
LinuxLinuxcfb6eeb4c860592edd123fdea908d23c6ad1c7dc < ae3831b44f477de048287493e184fc3ff913b624affected
LinuxLinuxcfb6eeb4c860592edd123fdea908d23c6ad1c7dc < b502e97e29d791ff7a8051f29a414535739be218affected
LinuxLinuxcfb6eeb4c860592edd123fdea908d23c6ad1c7dc < 46d0d6f50dab706637f4c18a470aac20a21900d3affected
LinuxLinux2.6.20affected
LinuxLinux0 < 2.6.20unaffected
LinuxLinux5.10.253 <= 5.10.*unaffected
LinuxLinux5.15.210 <= 5.15.*unaffected
LinuxLinux6.1.167 <= 6.1.*unaffected
LinuxLinux6.6.130 <= 6.6.*unaffected
LinuxLinux6.12.78 <= 6.12.*unaffected
LinuxLinux6.18.19 <= 6.18.*unaffected
LinuxLinux6.19.9 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References