CVE-2026-43016 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().

🗓️ 01 May 2026 14:15:20Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Fix use-after-free of peer socket in sk_psock_verdict_data_ready via RCU.

Reporter	Title	Published	Views	Family All 30
ATTACKERKB	CVE-2026-43016	1 May 202614:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1695)	9 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1746)	27 May 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50372)	6 Jul 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0849	3 Jun 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-43016	2 May 202600:00	–	nessus
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability in the net/core/skmsg.c module of the Linux operating system allows a hacker to cause a service failure.	12 May 202600:00	–	bdu_fstec
CNNVD	Linux kernel 安全漏洞	1 May 202600:00	–	cnnvd
CVE	CVE-2026-43016	1 May 202614:15	–	cve

Source	Link
git	www.git.kernel.org/stable/c/18861f87a043e78b1f901cae4237e755ed7ef095
git	www.git.kernel.org/stable/c/68187f18a89be4b6237d28ae1313b5adf76238c6
git	www.git.kernel.org/stable/c/8d597e3e74027900ffa81b8ff47ab51999a3e110
git	www.git.kernel.org/stable/c/ad8391d37f334ee73ba91926f8b4e4cf6d31ea04
git	www.git.kernel.org/stable/c/af95bc39a83d82ae6ad253986335037256888b3f
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43016.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-43016
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

15 Jul 2026 01:48Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8

EPSS0.00125

sockmap use after free read copy update verdict data ready peer socket