Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
CVSS Score
CRITICAL
References
- https://git.kernel.org/stable/c/080b0e210088296dd50d6637c06c1db14246adfe
- https://git.kernel.org/stable/c/67edfec516d30d3e62925c397be4a1e5185802fc
- https://git.kernel.org/stable/c/8be6ed64966da48b6c4726918f106c18742a5125
- https://git.kernel.org/stable/c/a269cbdc442f8658bca35383e34b9d0b0ff95a1c
FAQ
What is CVE-2026-43384?
CVE-2026-43384 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the ...
How severe is CVE-2026-43384?
CVE-2026-43384 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-43384?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.