PT-2026-39072 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-43411

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A divide-by-zero exception occurs in the tipc sk filter connect() function. A user can set the conn timeout variable to a value between 0 and 3 using setsockopt(TIPC CONN TIMEOUT). When a SYN is rejected with TIPC ERR OVERLOAD and the retry path executes, the modulo operation using conn timeout divided by 4 results in a division by zero, leading to a kernel oops or panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2026-43411

Affected Products

Linux Kernel

References · 20

• https://git.kernel.org/stable/c/c2ebfbe63deb7bfd4dc2532bae62a7ed67713272 · Patch
• https://git.kernel.org/stable/c/6c5a9baa15de240e747263aba435a0951da8d8d2 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43411 · Vendor Advisory
• https://git.kernel.org/stable/c/579956f9f297eb1b6a5d24de313f3acccee1f9d5 · Patch
• https://git.kernel.org/stable/c/338c5edeb6ae3f12a4b84dff9d71f6f7f8c202c3 · Patch
• https://git.kernel.org/stable/c/600feb0a66a98c6b7f6f02b5f3612e75f9b8540f · Patch
• https://cve.org/CVERecord?id=CVE-2026-43411 · Security Note
• https://git.kernel.org/stable/c/3bc9998041076ee05d3f312a22cee6b2ca35527f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43411 · Security Note
• https://git.kernel.org/stable/c/a360d3815aae1f00dd71b7714a846482e85cc1f7 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43411 · Vendor Advisory
• https://git.kernel.org/stable/c/2754e7b3d64748643df867d1ea6fec522914b635 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43411 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43411 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43411 · Vendor Advisory