THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-43038 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP error packet where its cb contains an IPv4 inet_skb_p

[NVD] CVE-2026-43038 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP error packet where its cb contains an IPv4 inet_skb_p

lownvdPublished 2026-05-01

CVE-2026-43038 CVSS: 9.8 CRITICAL Published: 2026-05-01T15:16:48.533

In the Linux kernel, the following vulnerability has been resolved:

ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

Sashiko AI-review observed:

In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP error packet where its cb contains an IPv4 inet_skb_parm. When skb is cloned into skb2 and passed to

Indicators of compromise

CVE-2026-43038cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-43038