CVE-2026-43088 is a Linux kernel information-disclosure flaw published on May 6, 2026, in which PF_KEY export messages can expose four uninitialized padding bytes from IPv6 sockaddr data in specific IPsec-related paths, according to the kernel.org CVE record mirrored by Microsoft’s Security...