CVE-2026-43494

Linux · kernel

A memory management flaw in the Linux kernel's RDS (Reliable Datagram Sockets) implementation can lead to inconsistent state when zerocopy page pinning fails.

Executive summary

A resource management error in the Linux kernel's RDS subsystem could allow for memory corruption or denial of service.

Vulnerability

The vulnerability exists in rds_message_zcopy_from_user(), where the op_nents variable is not correctly reset when iov_iter_get_pages2() fails. This creates an inconsistent state during cleanup.

Business impact

The CVSS score of 7.8 (High) indicates a significant threat to system stability. Improper handling of page pinning failures during socket operations can lead to kernel memory leaks or crashes, impacting the availability of network-intensive applications.

Remediation

Immediate Action: Update the Linux kernel to the latest version to ensure correct cleanup of RDS zerocopy operations.

Proactive Monitoring: Monitor system logs for kernel warnings related to socket memory or RDS-specific errors.

Compensating Controls: Limit access to RDS-based network sockets where possible and employ general kernel hardening measures.

Exploitation status

Public Exploit Available: false

Analyst recommendation

Kernel stability is paramount for high-performance networking. Organizations using RDS should apply the latest kernel updates to remediate this memory management flaw.