CVE-2026-43384 is a critical vulnerability in the Linux kernel's TCP Authentication Option (tcp-ao) implementation. The issue involved the Message Authentication Code (MAC) comparison not being performed in constant time, which could allow timing attacks. The vulnerability has been fixed by updating the MAC comparison to use a constant-time helper function, preventing attackers from inferring sensitive information through timing analysis.