CVE-2026-43284: Fix for in‑place decryption on shared skb fragments in Linux’s ESP path

Originally published at: CVE-2026-43284: Fix for in‑place decryption on shared skb fragments in Linux’s ESP path - ToolsLib Blog

CVE-2026-43284 fixes a Linux kernel ESP receive-path flaw where in-place decryption could occur on shared skb fragments. Here’s what’s confirmed and how to proceed.