CVE-2026-43411

MEDIUM EPSS 2.4%

Published May 8, 20261mo ago · Modified Jun 17, 20262w ago

5.5 CVSS 3.1

Medium

Published May 8, 2026 1mo ago

Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: tipc: fix divide-by-zero in tipc_sk_filter_connect() A user can set conn_timeout to any value via setsockopt(TIPC_CONN_TIMEOUT), including values less than 4. When a SYN is rejected with TIPC_ERR_OVERLOAD and the retry path in tipc_sk_filter_connect() executes: delay %= (tsk->conn_timeout / 4); If conn_timeout is in the range [0, 3], the integer division yields 0, and the modulo operation triggers a divide-by-zero exception, causing a kernel oops/panic. Fix this by clamping conn_timeout to a minimum of 4 at the point of use in tipc_sk_filter_connect(). Oops: divide error: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 119 Comm: poc-F144 Not tainted 7.0.0-rc2+ RIP: 0010:tipc_sk_filter_rcv (net/tipc/socket.c:2236 net/tipc/socket.c:2362) Call Trace: tipc_sk_backlog_rcv (include/linux/instrumented.h:82 include/linux/atomic/atomic-instrumented.h:32 include/net/sock.h:2357 net/tipc/socket.c:2406) __release_sock (include/net/sock.h:1185 net/core/sock.c:3213) release_sock (net/core/sock.c:3797) tipc_connect (net/tipc/socket.c:2570) __sys_connect (include/linux/file.h:62 include/linux/file.h:83 net/socket.c:2098)

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

2.4% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-369

Affected Products 10

Vendor	Product	Version	Range
linux	linux_kernel	*	≥4.20 – <5.10.253
linux	linux_kernel	*	≥5.11 – <5.15.203
linux	linux_kernel	*	≥5.16 – <6.1.167
linux	linux_kernel	*	≥6.2 – <6.6.130
linux	linux_kernel	*	≥6.7 – <6.12.78
linux	linux_kernel	*	≥6.13 – <6.18.19
linux	linux_kernel	*	≥6.19 – <6.19.9
linux	linux_kernel	7.0	any
linux	linux_kernel	7.0	any
linux	linux_kernel	7.0	any

References 8

git.kernel.org https://git.kernel.org/stable/c/2754e7b3d64748643df867d1ea6fec522914b635

Patch
git.kernel.org https://git.kernel.org/stable/c/338c5edeb6ae3f12a4b84dff9d71f6f7f8c202c3

Patch
git.kernel.org https://git.kernel.org/stable/c/3bc9998041076ee05d3f312a22cee6b2ca35527f

Patch
git.kernel.org https://git.kernel.org/stable/c/579956f9f297eb1b6a5d24de313f3acccee1f9d5

Patch
git.kernel.org https://git.kernel.org/stable/c/600feb0a66a98c6b7f6f02b5f3612e75f9b8540f

Patch
git.kernel.org https://git.kernel.org/stable/c/6c5a9baa15de240e747263aba435a0951da8d8d2

Patch
git.kernel.org https://git.kernel.org/stable/c/a360d3815aae1f00dd71b7714a846482e85cc1f7

Patch
git.kernel.org https://git.kernel.org/stable/c/c2ebfbe63deb7bfd4dc2532bae62a7ed67713272

Patch

Remediation

git.kernel.org https://git.kernel.org/stable/c/2754e7b3d64748643df867d1ea6fec522914b635

Patch
git.kernel.org https://git.kernel.org/stable/c/338c5edeb6ae3f12a4b84dff9d71f6f7f8c202c3

Patch
git.kernel.org https://git.kernel.org/stable/c/3bc9998041076ee05d3f312a22cee6b2ca35527f

Patch
git.kernel.org https://git.kernel.org/stable/c/579956f9f297eb1b6a5d24de313f3acccee1f9d5

Patch
git.kernel.org https://git.kernel.org/stable/c/600feb0a66a98c6b7f6f02b5f3612e75f9b8540f

Patch
git.kernel.org https://git.kernel.org/stable/c/6c5a9baa15de240e747263aba435a0951da8d8d2

Patch
git.kernel.org https://git.kernel.org/stable/c/a360d3815aae1f00dd71b7714a846482e85cc1f7

Patch
git.kernel.org https://git.kernel.org/stable/c/c2ebfbe63deb7bfd4dc2532bae62a7ed67713272

Patch