Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-43383 Details

Description

In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:9.4 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/02669e2a4d207068edce7e8b5fafd85822018ce6 kernel.orgPatch
https://git.kernel.org/stable/c/345a9530756528d7ca407663d659c3c40e75c3dd kernel.orgPatch
https://git.kernel.org/stable/c/46d0d6f50dab706637f4c18a470aac20a21900d3 kernel.orgPatch
https://git.kernel.org/stable/c/5d305a95130a8d08b9545e47f1e18d29d59866cb kernel.orgPatch
https://git.kernel.org/stable/c/821c8751fdeecdeecabeb11704dd33439c9e4bbc kernel.orgPatch

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 2.6.20, < 5.10.253
>= 5.11, < 6.1.167
>= 6.2, < 6.6.130
>= 6.7, < 6.12.78
>= 6.13, < 6.18.19

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-43383
NVD Published Date:
May 8, 2026
NVD Last Modified:
Jun 19, 2026
Source:
kernel.org