← All advisories

Critical severity9.8NVD Advisory· Published May 8, 2026· Updated May 26, 2026

CVE-2026-43384

CVE-2026-43384

Description

In the Linux kernel, the following vulnerability has been resolved:

net/tcp-ao: Fix MAC comparison to be constant-time

To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Affected products

4

Linux/Kernel4 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.7,<6.12.78
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.

CVE-2026-43384 · Critical · VYPR