CVE-2026-43336 is a vulnerability in the Linux kernel's ChaCha cryptographic implementation where the permuted_state variable was not zeroized before leaving scope. Because the ChaCha permutation is invertible, this could allow recovery of the original state and key from residual data in memory. The kernel has addressed this by explicitly zeroizing permuted_state to prevent key leakage.