THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-43284 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(), so later paths th

[NVD] CVE-2026-43284 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(), so later paths th

lownvdPublished 2026-05-08

CVE-2026-43284 CVSS: 8.8 HIGH Published: 2026-05-08T08:16:43.827

In the Linux kernel, the following vulnerability has been resolved:

xfrm: esp: avoid in-place decrypt on shared skb frags

MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(), so later paths that may modify packet data can first make a private cop

Indicators of compromise

CVE-2026-43284cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-43284