CVE-2026-43042

High

Description

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platform_label{,s} pair The RCU-protected codepaths (mpls_forward, mpls_dump_routes) can have an inconsistent view of platform_labels vs platform_label in case of a concurrent resize (resize_platform_label_table, under platform_mutex). This can lead to OOB accesses. This patch adds a seqcount, so that we get a consistent snapshot. Note that mpls_label_ok is also susceptible to this, so the check against RTA_DST in rtm_to_route_config, done outside platform_mutex, is not sufficient. This value gets passed to mpls_label_ok once more in both mpls_route_add and mpls_route_del, so there is no issue, but that additional check must not be removed.

SeverityHigh
CVSS7.1
Exploit probability—
ProductLinux Kernel
PublishedMay 1, 2026
First seenMay 1, 2026

How to fix

Update
  • linux linux_kernel6.19.12 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel4.1 ≤ v < 6.19.12, 7.06.19.12
microsoft azl3_kernel_6.6.134.1-2No range specified—
microsoft azl3_kernel_6.6.138.1-1No range specified—
microsoft azl3_kernel_6.6.143.1-1No range specified—
microsoft azl3_kernel_6.6.144.1-1No range specified—
microsoft azl3_kernel_6.6.145.2-1No range specified—
microsoft azl3_kernel_6.6.137.1-2No range specified—
microsoft azl3_kernel_6.6.139.1-1No range specified—
microsoft azl3_kernel_6.6.141.1-1No range specified—
microsoft azl3_kernel_6.6.150.1-1No range specified—
microsoft azl3_kernel_6.6.152.1-1No range specified—
microsoft azl3_kernel_6.6.157.1-1No range specified—
microsoft azl3_kernel_6.6.159.1-1No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.