01 Record

CVE-2026-43494

net/rds: reset op_nents when zerocopy page pin fails

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net/rds: reset op_nents when zerocopy page pin fails

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.30% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 22.3% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-23.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-21 10:49Z3 MO AGO

Last updated

2026-08-05 12:28Z1 MO AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-1341Multiple Releases of Same Resource or HandleBase

Data version

5.2

Document digest

aa1ba54bafd411244b85ff71d6e548832dcd79d58f52421f4459459601b34345

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to < c6e51512a784c4a7b86e1a044988696e3b3721fa, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to < 03014551938a0887fa55f18ce49b70158a9c0113, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to < d84ce1786ce40fdd3dd98db47aec5527817e1ef6, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to < 9115669faedccdda100428e2d26fd0aac8c50799, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to < 0bbbff00a15b1df2cac9014d6cf4b6890f473353, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to < 640e37f58f991546a87540d067279c2c1fa9fe51, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to < 290e833d1acb1093bc121fcdc97f5e6161157479, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to < e174929793195e0cd6a4adb0cad731b39f9019b4, 4.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/c6e51512a784c4a7b86e1a044988696e3b3721fa
git.kernel.orghttps://git.kernel.org/stable/c/03014551938a0887fa55f18ce49b70158a9c0113
git.kernel.orghttps://git.kernel.org/stable/c/d84ce1786ce40fdd3dd98db47aec5527817e1ef6
git.kernel.orghttps://git.kernel.org/stable/c/9115669faedccdda100428e2d26fd0aac8c50799
git.kernel.orghttps://git.kernel.org/stable/c/0bbbff00a15b1df2cac9014d6cf4b6890f473353
git.kernel.orghttps://git.kernel.org/stable/c/640e37f58f991546a87540d067279c2c1fa9fe51
git.kernel.orghttps://git.kernel.org/stable/c/290e833d1acb1093bc121fcdc97f5e6161157479
git.kernel.orghttps://git.kernel.org/stable/c/e174929793195e0cd6a4adb0cad731b39f9019b4
github.comhttps://github.com/v12-security/pocs/tree/main/pintheft
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/21/2
access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-43494vdb-entryx_refsource_REDHAT
bugzilla.redhat.comRHBZ#2480434https://bugzilla.redhat.com/show_bug.cgi?id=2480434issue-trackingx_refsource_REDHAT
security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43494.jsonx_sadp-csaf-vex

01 Record index

CVE-2026-43494

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-43494

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References