CVE-2026-43494
Linux · kernel
A memory management flaw in the Linux kernel's RDS (Reliable Datagram Sockets) implementation can lead to inconsistent state when zerocopy page pinning fails.
Executive summary
A resource management error in the Linux kernel's RDS subsystem could allow for memory corruption or denial of service.
Vulnerability
The vulnerability exists in rds_message_zcopy_from_user(), where the op_nents variable is not correctly reset when iov_iter_get_pages2() fails. This creates an inconsistent state during cleanup.
Business impact
The CVSS score of 7.8 (High) indicates a significant threat to system stability. Improper handling of page pinning failures during socket operations can lead to kernel memory leaks or crashes, impacting the availability of network-intensive applications.
Remediation
Immediate Action: Update the Linux kernel to the latest version to ensure correct cleanup of RDS zerocopy operations.
Proactive Monitoring: Monitor system logs for kernel warnings related to socket memory or RDS-specific errors.
Compensating Controls: Limit access to RDS-based network sockets where possible and employ general kernel hardening measures.
Exploitation status
Public Exploit Available: false
Analyst recommendation
Kernel stability is paramount for high-performance networking. Organizations using RDS should apply the latest kernel updates to remediate this memory management flaw.