Out-of-Bounds Access in Linux Kernel Affects Networking Functionality

CVE-2026-43083

What is CVE-2026-43083?

A vulnerability exists in the networking subsystem of the Linux kernel that can lead to an out-of-bounds access of the dev->_tx[] array. This issue arises when trace->type.bit6 is activated, potentially permitting unauthorized access to memory locations. Users could face system instability when the ingress device operates more RX queues than the egress device's TX queues. Additionally, this flaw exposes inaccuracies in per queue visibility and necessitates enhancements in locking mechanisms to ensure thread safety across different contexts, thereby putting system integrity at risk.

References