CVE-2026-43107
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/05/2026
Última modificación:
06/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xfrm: account XFRMA_IF_ID in aevent size calculation<br />
<br />
xfrm_get_ae() allocates the reply skb with xfrm_aevent_msgsize(), then<br />
build_aevent() appends attributes including XFRMA_IF_ID when x->if_id is<br />
set.<br />
<br />
xfrm_aevent_msgsize() does not include space for XFRMA_IF_ID. For states<br />
with if_id, build_aevent() can fail with -EMSGSIZE and hit BUG_ON(err