CVE-2026-43244
Description
A flaw was found in the Linux kernel's Kernel Connection Multiplexer (KCM) module. A local user could trigger an issue where, during partial sendmsg operations, an empty network buffer (skb) is incorrectly left in the frag_list. A subsequent zero-length write operation can then cause a kernel warning, potentially leading to a denial of service (DoS) by causing system instability.
Understanding the Weakness (CWE)
Integrity,Other
Technical Impact: Varies by Context; Unexpected State; Alter Execution Logic
An attacker could utilize an ignored error condition to place the system in an unexpected state that could lead to the execution of unintended logic and could cause other unintended behavior.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
