Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43089

xfrm_user: fix info leak in build_mapping()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding hole after the proto field, which ends up never getting set to zero before copying out to userspace. Fix that up by zeroing out the whole structure before setting individual variables.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3a2dfbe8acb154905fdc2fd03ec56df42e6c4cc4 to < 521385cbd50ca9474396d88462fcdfa6489685d9affected
  • 3a2dfbe8acb154905fdc2fd03ec56df42e6c4cc4 to < c2779ae9a3e5a044e5ccd564681511bbbcc5fc0faffected
  • 3a2dfbe8acb154905fdc2fd03ec56df42e6c4cc4 to < 72a8de41c3eb4dcf22bf3b674ea38fb2f75d6f32affected
  • 3a2dfbe8acb154905fdc2fd03ec56df42e6c4cc4 to < d3125c541a96fb3c0fc7210112684baf22b6c24daffected
  • 3a2dfbe8acb154905fdc2fd03ec56df42e6c4cc4 to < 5a1a4b049ddde41466ccac0daeec326254b133f2affected
  • 3a2dfbe8acb154905fdc2fd03ec56df42e6c4cc4 to < f779a6b6cdb6e12baa0663063ac59ab2a8f20c0caffected
  • 3a2dfbe8acb154905fdc2fd03ec56df42e6c4cc4 to < 700c9622b23c33b5933e6dcea816492c064e4e10affected
  • 3a2dfbe8acb154905fdc2fd03ec56df42e6c4cc4 to < 1beb76b2053b68c491b78370794b8ff63c8f8c02affected

Linux Linux

Default version status: affected

  • 2.6.29affected
  • 0 to < 2.6.29unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.136 to ≤ 6.6.*unaffected
  • 6.12.83 to ≤ 6.12.*unaffected
  • 6.18.24 to ≤ 6.18.*unaffected
  • 6.19.14 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References