CVE-2026-43042
Gravedad CVSS v3.1:
ALTA
Tipo:
CWE-125
Lectura fuera de límites
Fecha de publicación:
01/05/2026
Última modificación:
08/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mpls: add seqcount to protect the platform_label{,s} pair<br />
<br />
The RCU-protected codepaths (mpls_forward, mpls_dump_routes) can have<br />
an inconsistent view of platform_labels vs platform_label in case of a<br />
concurrent resize (resize_platform_label_table, under<br />
platform_mutex). This can lead to OOB accesses.<br />
<br />
This patch adds a seqcount, so that we get a consistent snapshot.<br />
<br />
Note that mpls_label_ok is also susceptible to this, so the check<br />
against RTA_DST in rtm_to_route_config, done outside platform_mutex,<br />
is not sufficient. This value gets passed to mpls_label_ok once more<br />
in both mpls_route_add and mpls_route_del, so there is no issue, but<br />
that additional check must not be removed.
Impacto
Puntuación base 3.x
7.10
Gravedad 3.x
ALTA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.1 (incluyendo) | 6.19.12 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página