netfilter: xt_tcpmss: check remaining length before reading optlen

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-43190 · Microsoft / collected KEV context

cve-program · CVE-2026-43190

• https://git.kernel.org/stable/c/f895191dc32c53eaf443b6443fe40945b2f92287
• https://git.kernel.org/stable/c/cd5beda7e0e32865e214f28034bb92c1cecff885
• https://git.kernel.org/stable/c/eaedc0bc18be46fe7f58170e967959a932c4f824
• https://git.kernel.org/stable/c/07a9b32eaae792ff7d0fcac14d8920c937c0a9c3
• https://git.kernel.org/stable/c/8b300f726640c48c3edfe9c453334dd801f4b74e
• https://git.kernel.org/stable/c/5e13d0a37666955b6cfddc0f73cb40ed645b8a05
• https://git.kernel.org/stable/c/f6c412dcfd76b0516d51aa847d8f4c7b70381b09
• https://git.kernel.org/stable/c/735ee8582da3d239eb0c7a53adca61b79fb228b3

No related operational record is retained in the current change model.