CVE-2026-43384

CRITICAL

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use t...

Affects 0 products across 2 vendors.

CVSS 3.19.8
EPSS0.7%
Percentile51th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in the Linux kernel's TCP-AO implementation allows for timing attacks due to non-constant time MAC comparison. This has been addressed by using a constant-time comparison function.

BSID: BS-2026-GLOBAL-306105-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-43384?
A vulnerability in the Linux kernel's TCP-AO implementation allows for timing attacks due to non-constant time MAC comparison. This has been addressed by using a constant-time comparison function.
What is the CVSS score for CVE-2026-43384?
CVE-2026-43384 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.7%.
Is CVE-2026-43384 actively exploited?
No confirmed active exploitation of CVE-2026-43384 as of 2026-05-30.
How do I remediate CVE-2026-43384?
Priority: IMMEDIATE.
What systems are affected by CVE-2026-43384?
CVE-2026-43384 affects Kernel; Linux.
Vulnerability Details
CVE IDCVE-2026-43384
BSIDBS-2026-GLOBAL-306105-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2026-05-08
Last Modified2026-05-12
ICS Relevance0%
SourceNVD
Official Description

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker could exploit this vulnerability by analyzing the timing of MAC comparisons to infer the correct MAC value, potentially leading to unauthorized access or session hijacking.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Kernel — —
Linux — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 160 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash435c82c20c2ac438d5ff203e455a7134f435a9b0bb4639d5d923fc14d8ef60092699133314ef45af3c8f41fa23dfc907ddf0bb742d5912e57bb11b68b75a2ad7
Related CVEs affecting Kernel
CVE-2026-25592 9.9 Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents an... CVE-2023-53867 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: fi... CVE-2025-40212 9.8 In the Linux kernel, the following vulnerability has been resolved: nfsd: fi... CVE-2025-68745 9.8 In the Linux kernel, the following vulnerability has been resolved: scsi: ql... CVE-2025-68726 9.8 In the Linux kernel, the following vulnerability has been resolved: crypto: ...
View all Kernel CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →