PT-2026-37530 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-28 · CVE-2026-43190

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the TCP option parser within the net/netfilter/xt tcpmss.c file. The issue occurs when the code reads op[i+1] without validating the remaining option length. If the last byte of the option field is not EOL (End of List) or NOP (No Operation), the system may access memory beyond the optlen boundary, potentially reading past the opt stack buffer or the subsequent payload.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2026:21706

ALSA-2026:21745

CVE-2026-43190

Affected Products

Linux Kernel

References · 60

• https://cve.org/CVERecord?id=CVE-2026-43190 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-43190 · Vendor Advisory
• https://git.kernel.org/stable/c/cd5beda7e0e32865e214f28034bb92c1cecff885 · Patch
• https://git.kernel.org/stable/c/f895191dc32c53eaf443b6443fe40945b2f92287 · Patch
• https://git.kernel.org/stable/c/07a9b32eaae792ff7d0fcac14d8920c937c0a9c3 · Patch
• https://git.kernel.org/stable/c/eaedc0bc18be46fe7f58170e967959a932c4f824 · Patch
• https://osv.dev/vulnerability/ALSA-2026:21706 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-21706.html · Vendor Advisory
• https://git.kernel.org/stable/c/f6c412dcfd76b0516d51aa847d8f4c7b70381b09 · Patch
• https://ubuntu.com/security/CVE-2026-43190 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43190 · Security Note
• https://git.kernel.org/stable/c/8b300f726640c48c3edfe9c453334dd801f4b74e · Patch
• https://git.kernel.org/stable/c/735ee8582da3d239eb0c7a53adca61b79fb228b3 · Patch
• https://errata.almalinux.org/8/ALSA-2026-21745.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43190 · Vendor Advisory