CVE-2026-43092

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description AF XDP bind accepts zero-copy pool configurations without verifying if the device Maximum Transmission Unit (MTU)—the largest size packet a network interface can handle—fits into the usable frame space provided by the UMEM chunk. This occurs because tailroom and headroom are subtracted from the chunk size, meaning a 2k chunk size may not provide sufficient space for a standard 1500 MTU. Additionally, there is a failure to validate if the underlying hardware can satisfy the configured MTU relative to the XSK frame size multiplied by the supported Rx buffer chain length, which is exposed via net device::xdp zc max segs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.