Search: CVE-2026-43006

CVE-2026-43006 is a vulnerability in the Linux kernel's io_uring subsystem where zero-length fixed buffer imports are improperly handled. The flaw allows an out-of-bounds read from slab memory due to incorrect validation logic in validate_fixed_range() and io_import_fixed(). This can lead to a kernel slab-out-of-bounds read, potentially causing denial of service or information disclosure. The issue has been resolved by returning early from io_import_fixed() when the length is zero, preventing the out-of-bounds access.