CVE-2026-43093 xsk: tighten UMEM headroom validation to account for tailroom and min frame
Insufficient headroom validation in Linux kernel XSK UMEM allows memory corruption, potentially leading to code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43093?
CVE-2026-43093 is a high-severity memory corruption vulnerability in Linux kernel, published on 6 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
xsk: tighten UMEM headroom validation to account for tailroom and min frame
The current headroom validation in xdp_umem_reg() could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore if multi-buffer would come to play then skb_shared_info stored at the end of XSK frame would be corrupted.
HW typically works with 128-aligned sizes so let us provide this value as bare minimum.
Multi-buffer setting is known later in the configuration process so besides accounting for 128 bytes, let us also take care of tailroom space upfront.
Weakness: CWE-787
Which versions are affected by CVE-2026-43093?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43093?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-43093 being exploited?
There is no known exploitation of CVE-2026-43093 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43093, DEBIAN-CVE-2026-43093, GHSA-m2xh-q35x-h5f5, ROOT-OS-DEBIAN-11-CVE-2026-43093, ROOT-OS-DEBIAN-12-CVE-2026-43093, ROOT-OS-UBUNTU-2204-CVE-2026-43093 and 2 more.