Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-43384

net/tcp-ao: Fix MAC comparison to be constant-time

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0a3a809089eb1d4a0a2fd0c16b520d603988c859 to < 8be6ed64966da48b6c4726918f106c18742a5125affected
  • 0a3a809089eb1d4a0a2fd0c16b520d603988c859 to < a269cbdc442f8658bca35383e34b9d0b0ff95a1caffected
  • 0a3a809089eb1d4a0a2fd0c16b520d603988c859 to < 080b0e210088296dd50d6637c06c1db14246adfeaffected
  • 0a3a809089eb1d4a0a2fd0c16b520d603988c859 to < 67edfec516d30d3e62925c397be4a1e5185802fcaffected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.12.78 to ≤ 6.12.*unaffected
  • 6.18.19 to ≤ 6.18.*unaffected
  • 6.19.9 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References