CVE-2026-43035
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak When building netlink messages, tc_chain_fill_node() never initializes the tcm_info field of struct tcmsg. Since the allocation is not zeroed, kernel heap memory is leaked to userspace through this 4-byte field. The fix simply zeroes tcm_info alongside the other fields that are already initialized.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedMay 1, 2026
First seenMay 1, 2026
Weakness typeCWE-908CWE-908
How to fix
Update
- linux linux_kernel5.10.253, 5.15.203, 6.1.168, 6.6.134, 6.12.81, 6.18.22, 6.19.12 or later
Patches
- git.kernel.org/stable/c/1091b3c174441a52fdbb92e2fe00338f9371a91c
- git.kernel.org/stable/c/4ae5d23f51fb91d7d1140c6f1ba77ab0756054c3
- git.kernel.org/stable/c/71a3eda7e850ae844cb8993065f4e410c11a46ce
- git.kernel.org/stable/c/903c3405cfcc7700260e456ab66a5867586c9e69
- git.kernel.org/stable/c/906997ea3766c24fbbf9cc4bf17c047315bbd138
- git.kernel.org/stable/c/d6db08484c6cb3d4ad696246f9d288eceba2a078
- git.kernel.org/stable/c/e35f5195cd44ff4053fbc5d71ea97681728a0099
- git.kernel.org/stable/c/e6e3eb5ee89ac4c163d46429391c889a1bb5e404
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.19 ≤ v < 5.10.253, 5.11 ≤ v < 5.15.203, 5.16 ≤ v < 6.1.168, 6.2 ≤ v < 6.6.134, 6.7 ≤ v < 6.12.81, 6.13 ≤ v < 6.18.22, 6.19 ≤ v < 6.19.12, 7.0 | 5.10.253, 5.15.203, 6.1.168, 6.6.134, 6.12.81, 6.18.22, 6.19.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.