PT-2026-37566 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-08 · CVE-2026-43226

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Reliable Delivery Service (RDS) implementation where a shortcut was introduced allowing connections to transition from RDS CONN ERROR directly back to RDS CONN CONNECTING via the rds tcp accept one path() function. This bypasses the expected shutdown path. If a subsequent rds tcp reset callbacks() call transitions the state to RDS CONN RESETTING while a shutdown worker is queued, the rds conn init shutdown() function fails to handle the RDS CONN RESETTING state. This results in the connection being dropped with a DR INV CONN STATE error, leaving the RDS SHUTDOWN WORK QUEUED flag active indefinitely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43226

Affected Products

Linux Kernel

References · 18

• https://ubuntu.com/security/CVE-2026-43226 · Vendor Advisory
• https://git.kernel.org/stable/c/19e384a7d00d888303a8285977cdf1970c6cccd6 · Patch
• https://git.kernel.org/stable/c/a179ac7be8f5a650d0068040705f4cddd6ca369c · Patch
• https://git.kernel.org/stable/c/899ef00963ce76f9fc421a7d02335fe4ead6389b · Patch
• https://git.kernel.org/stable/c/81248b1eb3c5954cc1fc7b33b7c03e34d20cb8c8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43226 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-43226 · Vendor Advisory
• https://git.kernel.org/stable/c/f0f729bdffb08af32e0f54521b81b8a9e0321f16 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43226 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43226 · Vendor Advisory
• https://git.kernel.org/stable/c/9ff599a9be784a808c36765086e3db2144aa3b66 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43226 · Security Note
• https://git.kernel.org/stable/c/ad22d24be635c6beab6a1fdd3f8b1f3c478d15da · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43226 · Vendor Advisory
• https://git.kernel.org/stable/c/9bcd7c00691a2db9745817d5ea79262a503b135c · Patch