CVE-2026-43043

A flaw was found in the Linux kernel's af-alg subsystem. When the AF_ALG interface chains a new af_alg_tsgl structure, it fails to unmark the end of a Scatter/Gather List (SGL). This can lead to a NULL pointer dereference during a subsequent sendmsg() operation, causing a kernel panic and resulting in a Denial of Service (DoS).

This Moderate impact flaw in the Linux kernel's af-alg subsystem can lead to a Denial of Service. A local attacker could trigger a kernel panic by exploiting a NULL pointer dereference when the AF_ALG interface fails to correctly manage Scatter/Gather Lists, impacting system availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.