Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-43384 Details

Description

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/080b0e210088296dd50d6637c06c1db14246adfe kernel.orgPatch
https://git.kernel.org/stable/c/67edfec516d30d3e62925c397be4a1e5185802fc kernel.orgPatch
https://git.kernel.org/stable/c/8be6ed64966da48b6c4726918f106c18742a5125 kernel.orgPatch
https://git.kernel.org/stable/c/a269cbdc442f8658bca35383e34b9d0b0ff95a1c kernel.orgPatch

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 6.7, < 6.12.78
>= 6.13, < 6.18.19
>= 6.19, < 6.19.9
7.0 rc1
7.0 rc2

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-43384
NVD Published Date:
May 8, 2026
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2026-43384 Details - Not Deferred