Answer in brief
CVE-2026-43043 records a Unknown severity vulnerability in crypto: af-alg - fix NULL pointer dereference in scatterwalk. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8ff590903d5fc7f5a0a988c38267a3d08e6393a2 <f48d3dd99199180cf37d6253550c55e86372309a || >=8ff590903d5fc7f5a0a988c38267a3d08e6393a2 <f9acceae7b004956851fd4268edf9f518a9bce04 || >=8ff590903d5fc7f5a0a988c38267a3d08e6393a2 <7195350fb78538c25cd790d703f8f2c73ee0d395 || >=8ff590903d5fc7f5a0a988c38267a3d08e6393a2 <7cdf2c6381b21ab5ccf8116750d5582fcd6c0f49 || >=8ff590903d5fc7f5a0a988c38267a3d08e6393a2 <44eafa39363e8d5dfda6a8c6eb6b45458ed4b948 || >=8ff590903d5fc7f5a0a988c38267a3d08e6393a2 <00cbdec17c15d024a1c5002c7365df7624a18a75 || >=8ff590903d5fc7f5a0a988c38267a3d08e6393a2 <4b03ab0a587ec57eb7ddb5c115d84a42896f60f7 || >=8ff590903d5fc7f5a0a988c38267a3d08e6393a2 <62397b493e14107ae82d8b80938f293d95425bcb | f48d3dd99199180cf37d6253550c55e86372309a, f9acceae7b004956851fd4268edf9f518a9bce04, 7195350fb78538c25cd790d703f8f2c73ee0d395, 7cdf2c6381b21ab5ccf8116750d5582fcd6c0f49, 44eafa39363e8d5dfda6a8c6eb6b45458ed4b948, 00cbdec17c15d024a1c5002c7365df7624a18a75, 4b03ab0a587ec57eb7ddb5c115d84a42896f60f7, 62397b493e14107ae82d8b80938f293d95425bcb |
| Linux/Linuxgeneric | 2.6.38 | Not reported |
Published upstream
May 1, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in scatterwalk The AF_ALG interface fails to unmark the end of a Scatter/Gather List (SGL) when chaining a new af_alg_tsgl structure. If a sendmsg() fills an SGL exactly to MAX_SGL_ENTS, the last entry is marked as the end. A subsequent sendmsg() allocates a new SGL and chains it, but fails to clear the end marker on the previous SGL's last data entry. This causes the crypto scatterwalk to hit a premature end, returning NULL on sg_next() and leading to a kernel panic during dereference. Fix this by explicitly unmarking the end of the previous SGL when performing sg_chain() in af_alg_alloc_tsgl().
Quoted source text, attributed separately from HOL analysis.