Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43383

In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8572c48042b5db51d18fdcd7031da1b6ada34a663ddeeac2dec5f56e9f4431b4
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/Kconfig","net/ipv4/tcp.c","net/ipv4/tcp_ipv4.c","net/ipv6/tcp_ipv6.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.20"},{"lessThan":"2.6.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaff…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/Kconfig","net/ipv4/tcp.c","net/ipv4/tcp_ipv4.c","net/ipv6/tcp_ipv6.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"821c8751fdeecdeecabeb11704dd33439c9e4bbc","status":"affected","version":"cfb6eeb4c860592edd123fdea908d23c6ad1c7dc","versionType":"git"},{"lessThan":"ff44ec94d4fc8348600a69de0a8fa1102c23bce8","status":"affected","version":"cfb6eeb4c860592edd123fdea908d23c6ad1c7dc","versionType":"git"},{"lessThan":"345a9530756528d7ca407663d659c3c40e75c3dd"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/Kconfig","net/ipv4/tcp.c","net/ipv4/tcp_ipv4.c","net/ipv6/tcp_ipv6.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.20"},{"lessThan":"2.6.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaff…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/Kconfig","net/ipv4/tcp.c","net/ipv4/tcp_ipv4.c","net/ipv6/tcp_ipv6.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"821c8751fdeecdeecabeb11704dd33439c9e4bbc","status":"affected","version":"cfb6eeb4c860592edd123fdea908d23c6ad1c7dc","versionType":"git"},{"lessThan":"ff44ec94d4fc8348600a69de0a8fa1102c23bce8","status":"affected","version":"cfb6eeb4c860592edd123fdea908d23c6ad1c7dc","versionType":"git"},{"lessThan":"345a9530756528d7ca407663d659c3c40e75c3dd"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":9.4,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/02669e2a4d207068edce7e8b5fafd85822018ce6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/345a9530756528d7ca407663d659c3c40e75c3dd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/46d0d6f50dab706637f4c18a470aac20a21900d3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/5d305a95130a8d08b9545e47f1e18d29d59866cb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/821c8751fdeecdeecabeb11704dd33439c9e4bbc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ae3831b44f477de048287493e184fc3ff913b624"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b502e97e29d791ff7a8051f29a414535739be218"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ff44ec94d4fc8348600a69de0a8fa1102c23bce8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:172638de67ff082fc8c32401eaf341d2af56b340f5db3497161157f8c32d5951 · sha256:9ad3edebaf40539c… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer