PT-2026-36453 · Linux · Linux Kernel

Syzbot · Published 2026-03-27 · Updated 2026-05-11 · CVE-2026-43036

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the gso features check() function, which is called from netif skb features(). The issue occurs when the system reads iph->frag off to determine if mangleid features should be cleared. Accessing the IPv4 header through ip hdr() or inner ip hdr() relies on header offsets that may not be safe for direct dereference, particularly for packets injected from PF PACKET paths, potentially leading to the use of uninitialized values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Uninitialized Pointer

Use of Uninitialized Resource

Weakness Enumeration

CWE-824

CWE-908

Related Identifiers

BDU:2026-06494

CVE-2026-43036

ECHO-065A-6633-2B88

Affected Products

Linux Kernel

References · 19

• https://git.kernel.org/stable/c/d970341cfa5594614c7a6634886c7688b4f5cafd · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43036 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06494 · Security Note
• https://git.kernel.org/stable/c/f7a6cd508e9e825a2c69fa9e13d41ee156852f25 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43036 · Vendor Advisory
• https://git.kernel.org/stable/c/cc91202fc20a44aab4c206f12a2bfe05da936051 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43036 · Security Note
• https://git.kernel.org/stable/c/ddc748a391dd8642ba6b2e4fe22e7f2ddf84b7f0 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43036 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43036 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43036 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43036 · Security Note
• https://feedly.com/cve/CVE-2026-43036 · Note
• https://twitter.com/windowsforum/status/2053758474937381362 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2026-43036 · Note