CVE-2026-43038

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the IPv6 ICMP error generation process. A remote attacker can send a specially crafted IPv4 ICMP error packet containing a Common Internet Protocol Security Option (CIPSO) IP option. This causes the system to incorrectly interpret IPv4 packet control block data as IPv6 data within the ip6 err gen icmpv6 unreach() function. Specifically, the CIPSO offset overlaps with the dsthao variable in the inet6 skb parm structure. This can lead the mip6 addr swap() function to perform an out-of-bounds memory access when scanning the packet for a Type-Length-Value (TLV) structure, potentially resulting in information disclosure or a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.