CVE-2026-43035

A flaw was found in the Linux kernel. A local user can exploit a vulnerability in the tc_chain_fill_node() function, which fails to initialize the tcm_info field of the struct tcmsg to zero. This oversight leads to an information disclosure, as uninitialized kernel heap memory is leaked to userspace through this 4-byte field. This could allow an attacker to gain sensitive information from the kernel's memory.

A Moderate information disclosure flaw was found in the Linux kernel's traffic control (tc) subsystem. A local attacker could exploit an uninitialized field in netlink messages to leak sensitive kernel heap memory to userspace. This vulnerability requires local user access to the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.