CVE-2026-43035
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-05-01
Modified: 2026-11-11
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak When building netlink messages, tc_chain_fill_node() never initializes the tcm_info field of struct tcmsg. Since the allocation is not zeroed, kernel heap memory is leaked to userspace through this 4-byte field. The fix simply zeroes tcm_info alongside the other fields that are already initialized.
Weakness Classification (1)
Affected Software (25)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 903c3405cfcc7700260e456ab66a5867586c9e69 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 71a3eda7e850ae844cb8993065f4e410c11a46ce |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 4ae5d23f51fb91d7d1140c6f1ba77ab0756054c3 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < e35f5195cd44ff4053fbc5d71ea97681728a0099 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < d6db08484c6cb3d4ad696246f9d288eceba2a078 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 906997ea3766c24fbbf9cc4bf17c047315bbd138 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 1091b3c174441a52fdbb92e2fe00338f9371a91c |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < e6e3eb5ee89ac4c163d46429391c889a1bb5e404 |
| Linux | Linux | 4.19 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 903c3405cfcc7700260e456ab66a5867586c9e69 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 71a3eda7e850ae844cb8993065f4e410c11a46ce |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 4ae5d23f51fb91d7d1140c6f1ba77ab0756054c3 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < e35f5195cd44ff4053fbc5d71ea97681728a0099 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < d6db08484c6cb3d4ad696246f9d288eceba2a078 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 906997ea3766c24fbbf9cc4bf17c047315bbd138 |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 1091b3c174441a52fdbb92e2fe00338f9371a91c |
| Linux | Linux | 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < e6e3eb5ee89ac4c163d46429391c889a1bb5e404 |
| Linux | Linux | 4.19 |
| linux | linux_kernel | 4.19 – 5.10.253 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |