CVE-2026-43042

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to March 2026

Description An out-of-bounds (OOB) access issue exists in the Linux kernel within the MPLS implementation. RCU-protected codepaths, specifically the mpls forward() and mpls dump routes() functions, can maintain an inconsistent view of platform labels versus platform label during a concurrent resize operation performed by the resize platform label table() function under platform mutex. Additionally, the mpls label ok() function is susceptible to this inconsistency. This flaw was discovered and exploited by the NebuSec security pipeline.

Recommendations Update the Linux kernel to a version released in March 2026 or later.