PT-2026-42458 · Linux · Linux Kernel

Published 2026-05-21 · Updated 2026-05-30 · CVE-2026-43502

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Reliable Delivery Service (RDS) implementation where zerocopy send operations can fail after user pages are pinned but before the message is attached to the sending socket. The cleanup process incorrectly infers the zerocopy state from rm->m rs, which may lead to unqueued messages being cleaned up as if they contained normal payload pages. Zerocopy ownership is actually determined by the presence of op mmp znotifier. This inconsistency occurs during early send failure cleanup before the message reaches the socket queue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43502

ECHO-7220-A71F-2BCE

OPENSUSE-SU-2026:10859-1

Affected Products

Linux Kernel

References · 32

• https://osv.dev/vulnerability/BELL-CVE-2026-43502 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43502 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43502 · Security Note
• https://ubuntu.com/security/CVE-2026-43502 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43502 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10859-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43502 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-43502 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43502 · Security Note
• https://suse.com/security/cve/CVE-2026-43497 · Note
• https://suse.com/security/cve/CVE-2026-43502 · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-43502 · Note
• https://git.kernel.org/stable/c/3abc8983b2bae3f487f77d9da5527d7d6b210d46 · Note
• https://suse.com/security/cve/CVE-2026-43498 · Note
• https://git.kernel.org/stable/c/46662f7dc59475995609bf3e9d27eb36f4acf26f · Note