Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43092

In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AF_XDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a problem since we started to respect tailroom which is subtracted from chunk_size (among with headroom). 2k chunk size might not provide enough space for standard 1500 MTU, so let us catch such settings a
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ab2a14e410873c9c890868804ab65a6cda6fdcd3404ac951ecd84f4fd508cdf1
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/xdp/xsk_buff_pool.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.6"},{"lessThan":"6.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.83","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.24","versionType":"semver"},{"lessThanO…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/xdp/xsk_buff_pool.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a55793e5a97d4e39bdb380873a9780fe0010bff6","status":"affected","version":"24ea50127ecf0efe819c1f6230add27abc6ca9d9","versionType":"git"},{"lessThan":"f669d60db11dbabb96279f2b20f9d1cba43cddb2","status":"affected","version":"24ea50127ecf0efe819c1f6230add27abc6ca9d9","versionType":"git"},{"lessThan":"25e1e91a8da819924df0b16e3812d7b24c8ce133","status":"affected","version":"24ea50127ecf0efe819c1f…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/xdp/xsk_buff_pool.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.6"},{"lessThan":"6.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.83","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.24","versionType":"semver"},{"lessThanO…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/xdp/xsk_buff_pool.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a55793e5a97d4e39bdb380873a9780fe0010bff6","status":"affected","version":"24ea50127ecf0efe819c1f6230add27abc6ca9d9","versionType":"git"},{"lessThan":"f669d60db11dbabb96279f2b20f9d1cba43cddb2","status":"affected","version":"24ea50127ecf0efe819c1f6230add27abc6ca9d9","versionType":"git"},{"lessThan":"25e1e91a8da819924df0b16e3812d7b24c8ce133","status":"affected","version":"24ea50127ecf0efe819c1f…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/affected/0

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/25e1e91a8da819924df0b16e3812d7b24c8ce133"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/36ee60b569ba0dfb6f961333b90d19ab5b323fa9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/a55793e5a97d4e39bdb380873a9780fe0010bff6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b2f4daa6422fd6cc0cec969794dab4a88ea4cea1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/f669d60db11dbabb96279f2b20f9d1cba43cddb2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d43d76eaa33abb69d0abeebcb743c0957db210e9ad98dd7e4201d884f6320cf · sha256:639be6c13108dc63… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer