Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-43383

net/tcp-md5: Fix MAC comparison to be constant-time

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cfb6eeb4c860592edd123fdea908d23c6ad1c7dc to < 821c8751fdeecdeecabeb11704dd33439c9e4bbcaffected
  • cfb6eeb4c860592edd123fdea908d23c6ad1c7dc to < ff44ec94d4fc8348600a69de0a8fa1102c23bce8affected
  • cfb6eeb4c860592edd123fdea908d23c6ad1c7dc to < 345a9530756528d7ca407663d659c3c40e75c3ddaffected
  • cfb6eeb4c860592edd123fdea908d23c6ad1c7dc to < 5d305a95130a8d08b9545e47f1e18d29d59866cbaffected
  • cfb6eeb4c860592edd123fdea908d23c6ad1c7dc to < 02669e2a4d207068edce7e8b5fafd85822018ce6affected
  • cfb6eeb4c860592edd123fdea908d23c6ad1c7dc to < ae3831b44f477de048287493e184fc3ff913b624affected
  • cfb6eeb4c860592edd123fdea908d23c6ad1c7dc to < b502e97e29d791ff7a8051f29a414535739be218affected
  • cfb6eeb4c860592edd123fdea908d23c6ad1c7dc to < 46d0d6f50dab706637f4c18a470aac20a21900d3affected

Linux Linux

Default version status: affected

  • 2.6.20affected
  • 0 to < 2.6.20unaffected
  • 5.10.253 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.78 to ≤ 6.12.*unaffected
  • 6.18.19 to ≤ 6.18.*unaffected
  • 6.19.9 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References