Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43244

In the Linux kernel, the following vulnerability has been resolved: kcm: fix zero-frag skb in frag_list on partial sendmsg error Syzkaller reported a warning in kcm_write_msgs() when processing a message with a zero-fragment skb in the frag_list. When kcm_sendmsg() fills MAX_SKB_FRAGS fragments in the current skb, it allocates a new skb (tskb) and links it into the frag_list before copying data. If the copy subsequently fails (e.g. -EFAULT from user memory), tskb remains in the frag_list with
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0686f8e7778aaf4d61103397db677667d1bfb664b701fe15fd7ea2c3f17c3a11
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/kcm/kcmsock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9ea3671d70ee07480d80bebe86696397c4e99fb7","status":"affected","version":"ab7ac4eb9832e32a09f4e8042705484d2fb0aad3","versionType":"git"},{"lessThan":"b1e3edf688a88c1a3ac41657055d9c136a08cd25","status":"affected","version":"ab7ac4eb9832e32a09f4e8042705484d2fb0aad3","versionType":"git"},{"lessThan":"7af58f76e4b404a74c836881a845e6652db8a09f","status":"affected","version":"ab7ac4eb9832e32a09f4e8042705…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b8f2d82e00936404b4b190908287da4ec39ce6088d1cd02b4b4db0129ae9421c · sha256:6bde2341d56f7837… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/kcm/kcmsock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.6"},{"lessThan":"4.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessThanOrEqual…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b8f2d82e00936404b4b190908287da4ec39ce6088d1cd02b4b4db0129ae9421c · sha256:6bde2341d56f7837… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/kcm/kcmsock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9ea3671d70ee07480d80bebe86696397c4e99fb7","status":"affected","version":"ab7ac4eb9832e32a09f4e8042705484d2fb0aad3","versionType":"git"},{"lessThan":"b1e3edf688a88c1a3ac41657055d9c136a08cd25","status":"affected","version":"ab7ac4eb9832e32a09f4e8042705484d2fb0aad3","versionType":"git"},{"lessThan":"7af58f76e4b404a74c836881a845e6652db8a09f","status":"affected","version":"ab7ac4eb9832e32a09f4e8042705…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b8f2d82e00936404b4b190908287da4ec39ce6088d1cd02b4b4db0129ae9421c · sha256:6bde2341d56f7837… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/kcm/kcmsock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.6"},{"lessThan":"4.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessThanOrEqual…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b8f2d82e00936404b4b190908287da4ec39ce6088d1cd02b4b4db0129ae9421c · sha256:6bde2341d56f7837… · /containers/cna/affected/1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/7af58f76e4b404a74c836881a845e6652db8a09f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b8f2d82e00936404b4b190908287da4ec39ce6088d1cd02b4b4db0129ae9421c · sha256:6bde2341d56f7837… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/9ea3671d70ee07480d80bebe86696397c4e99fb7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b8f2d82e00936404b4b190908287da4ec39ce6088d1cd02b4b4db0129ae9421c · sha256:6bde2341d56f7837… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b1e3edf688a88c1a3ac41657055d9c136a08cd25"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b8f2d82e00936404b4b190908287da4ec39ce6088d1cd02b4b4db0129ae9421c · sha256:6bde2341d56f7837… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/ca220141fa8ebae09765a242076b2b77338106b0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b8f2d82e00936404b4b190908287da4ec39ce6088d1cd02b4b4db0129ae9421c · sha256:6bde2341d56f7837… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer