Linux Kernel Vulnerability in RDS Component Affecting Page Management
CVE-2026-43494
Key Information:
Badges
What is CVE-2026-43494?
A vulnerability in the Linux kernel's RDS (Reliable Datagram Sockets) component affects the management of page pinning during zerocopy operations. When the function iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), it releases pinned pages correctly but fails to reset the op_nents variable. This can result in incorrect memory management, as subsequent calls to rds_message_purge() may mistakenly operate on an incorrect count of operation elements. This defect has been addressed to ensure that op_nents is properly reset when necessary.
Affected Version(s)
Linux 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3
Linux 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 < 03014551938a0887fa55f18ce49b70158a9c0113
Linux 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.