CVE-2026-43384
medium
Red Hat EPSS Score
0.0%
Exploitation probability in 30 days
Top 95% most likely to be exploited
Vulnerability Report
Generated by CyberWatcher
Description
A flaw was found in the Linux kernel's TCP Authentication Option (TCP-AO) implementation. This vulnerability arises from a non-constant-time comparison of Message Authentication Codes (MACs). A remote attacker could potentially exploit this timing discrepancy to perform a timing attack, which may lead to the disclosure of sensitive information.
CWE
CWE-208Affected Products
Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9