Linux Kernel Vulnerability in RDS Component Affecting Page Management

CVE-2026-43494

What is CVE-2026-43494?

A vulnerability in the Linux kernel's RDS (Reliable Datagram Sockets) component affects the management of page pinning during zerocopy operations. When the function iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), it releases pinned pages correctly but fails to reset the op_nents variable. This can result in incorrect memory management, as subsequent calls to rds_message_purge() may mistakenly operate on an incorrect count of operation elements. This defect has been addressed to ensure that op_nents is properly reset when necessary.

References