Linux Kernel Vulnerability in ICSSG PRUETH Data Dispatch Mechanism

CVE-2026-43039

What is CVE-2026-43039?

A vulnerability exists in the Linux kernel's ICSSG PRUETH component where packet data is not copied correctly during data dispatch. This flaw leads to the transmission of uninitialized heap memory instead of legitimate packet data, resulting in potential leakage of sensitive kernel heap information to userspace. Additionally, the mishandling of buffer recycling can further corrupt memory management processes. Proper remediation involves copying received data from the XDP buffer and ensuring correct memory management practices to avoid state corruption in the page pool.

References