CVE-2026-43139

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The xfrm6 get saddr() function fails to check the return value of ipv6 dev get saddr(). If ipv6 dev get saddr() cannot find a suitable source address and returns -EADDRNOTAVAIL, the saddr->in6 variable remains uninitialized, yet xfrm6 get saddr() incorrectly returns 0 to indicate success. This leads the xfrm tmpl resolve one() function to use the uninitialized address within xfrm state find(), which can trigger a KMSAN (Kernel Memory Sanitizer) warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.