CVE-2026-43036 is a medium-severity Linux kernel networking flaw published on May 1, 2026, and modified by NVD on May 8, affecting multiple kernel release lines where TCPv4 GSO handling can read an unsafe IPv4 header field from PF_PACKET-injected traffic. The fix is small, almost boringly so...