CVE-2026-43083

In the Linux kernel, the following vulnerability has been resolved: net: ioam6: fix OOB and missing lock When trace->type.bit6 is set: if (trace->type.bit6) { ... queue = skb_get_tx_queue(dev, skb); qdisc = rcu_dereference(queue->qdisc); This code can lead to an out-of-bounds access of the dev->_tx[] array when is_input is true. In such a case, the packet is on the RX path and skb->queue_mapping contains the RX queue index of the ingress device. If the ingress device has more RX queues than the egress device (dev) has TX queues, skb_get_queue_mapping(skb) will exceed dev->num_tx_queues. Add a check to avoid this situation since skb_get_tx_queue() does not clamp the index. This issue has also revealed that per queue visibility cannot be accurate and will be replaced later as a new feature. While at it, add missing lock around qdisc_qstats_qlen_backlog(). The function __ioam6_fill_trace_data() is called from both softirq and process contexts, hence the use of spin_lock_bh() here.

• CWE-125

• https://git.kernel.org/stable/c/6d1d9ed9b409e0662241e3d245d574a18f643494Patch
• https://git.kernel.org/stable/c/95a1334748c95dd15546056280ade0c4b8dd7b78Patch
• https://git.kernel.org/stable/c/b30b1675aa2bcf0491fd3830b051df4e08a7c8caPatch

Published

May 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-43078In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-43079In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-4308A weakness has been identified in frdel/agent0ai agent-zero …6.3
• CVE-2026-43080In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43081In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43082In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43084In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-43085In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43086In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43087In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43088In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43089In the Linux kernel, the following vulnerability has been re…5.5