Linux Kernel Vulnerability in PF_KEY Export Paths Affecting Multiple Network Features

CVE-2026-43088

What is CVE-2026-43088?

In the Linux kernel, a vulnerability exists in PF_KEY export paths where the sockaddr payload for IPv6 addresses does not fully initialize all necessary bytes. This flaw results from pfkey_sockaddr_fill(), which allocates 32 bytes on the wire but only zeros the initial 28 bytes, leaving the final 4 bytes uninitialized. This issue specifically affects certain PF_KEY message types, necessitating a fix to ensure better alignment and security in the handling of sockaddr payloads.

References