CVE-2026-43039
kernel: net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's icssg-prueth network driver. This vulnerability allows for information disclosure, where uninitialized kernel memory contents can be exposed to user applications. This occurs because the driver fails to properly copy received packet data into a network buffer before passing it up the system's network stack. This could allow a local user to access sensitive system information.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-909 · Missing Initialization of Resource