THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-43088 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: net: af_key: zero aligned sockaddr tail in PF_KEY exports PF_KEY export paths use `pfkey_sockaddr_size()` when reserving sockaddr payload space, so IPv6 addresses occupy 32 bytes on the wire. However, `pfkey_so

[NVD] CVE-2026-43088 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: net: af_key: zero aligned sockaddr tail in PF_KEY exports PF_KEY export paths use `pfkey_sockaddr_size()` when reserving sockaddr payload space, so IPv6 addresses occupy 32 bytes on the wire. However, `pfkey_so

lownvdPublished 2026-05-06

CVE-2026-43088 CVSS: 5.5 MEDIUM Published: 2026-05-06T10:16:22.090

In the Linux kernel, the following vulnerability has been resolved:

net: af_key: zero aligned sockaddr tail in PF_KEY exports

PF_KEY export paths use `pfkey_sockaddr_size()` when reserving sockaddr payload space, so IPv6 addresses occupy 32 bytes on the wire. However, `pfkey_sockaddr_fill()` initializes only the first 28 bytes o

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-43088