CVE-2026-43254 is a high-severity vulnerability in the Linux kernel's OpenVPN TCP stream processing. It involves improper handling of coalesced TCP packets in ovpn_tcp_recv, leading to header offset overflow and unaligned protocol headers. These bugs cause packet drops and performance penalties. The issue is fixed by allocating new buffers per packet and copying only the packet content, improving throughput and avoiding misalignment.