CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame
In the Linux kernel, the following vulnerability has been resolved:
xsk: tighten UMEM headroom validation to account for tailroom and min frame
The current headroom validation in xdpumemreg() could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore if multi-buffer would come to play then skbsharedinfo stored at the end of XSK frame would be corrupted.
HW typically works with 128-aligned sizes so let us provide this value as bare minimum.
Multi-buffer setting is known later in the configuration process so besides accounting for 128 bytes, let us also take care of tailroom space upfront.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43093?
CVE-2026-43093 has been classified with a medium severity level due to potential security impacts on the affected systems.
How do I fix CVE-2026-43093?
Fix CVE-2026-43093 by upgrading to a patched version of the Linux kernel that addresses the headroom validation issue.
What systems are affected by CVE-2026-43093?
CVE-2026-43093 affects various versions of the Linux kernel where the XDP (eXpress Data Path) user memory registration is implemented.
What does CVE-2026-43093 vulnerability involve?
CVE-2026-43093 involves inadequate validation of headroom in the XDP UMEM, which could lead to insufficient memory allocation.
Is there a workaround for CVE-2026-43093?
There are no official workarounds for CVE-2026-43093; the recommended solution is to apply the available kernel updates.