Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-43184

rnbd-srv: Zero the rsp buffer before using it

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchanged between different protocol versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2de6c8de192b9341ffa5e84afe1ce6196d4eef41 to < e4272754063d52c9ad0169865add8816ba696471affected
  • 2de6c8de192b9341ffa5e84afe1ce6196d4eef41 to < e2cacec7d4291300a282feb3af8eba57b93b15aaaffected
  • 2de6c8de192b9341ffa5e84afe1ce6196d4eef41 to < b646e54d23b9b592d612a2036aab14e0f6c14206affected
  • 2de6c8de192b9341ffa5e84afe1ce6196d4eef41 to < 30868a6a5238849d554295aff3ce61d242d7fad8affected
  • 2de6c8de192b9341ffa5e84afe1ce6196d4eef41 to < 7aac0a30dcf41cdb510526740d9a2ab1520c5d98affected
  • 2de6c8de192b9341ffa5e84afe1ce6196d4eef41 to < c94ede3c436dfbd9cedd9cb69f604f6fc901b6a2affected
  • 2de6c8de192b9341ffa5e84afe1ce6196d4eef41 to < 852475278ca5e96e0c0275950e1a84203e602b33affected
  • 2de6c8de192b9341ffa5e84afe1ce6196d4eef41 to < 69d26698e4fd44935510553809007151b2fe4db5affected

Linux Linux

Default version status: affected

  • 5.8affected
  • 0 to < 5.8unaffected
  • 5.10.252 to ≤ 5.10.*unaffected
  • 5.15.202 to ≤ 5.15.*unaffected
  • 6.1.165 to ≤ 6.1.*unaffected
  • 6.6.128 to ≤ 6.6.*unaffected
  • 6.12.75 to ≤ 6.12.*unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References