GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-43469 (GCVE-0-2026-43469)

Vulnerability from cvelistv5 – Published: 2026-05-08 14:22 – Updated: 2026-08-05 12:28
VLAI
Title
xprtrdma: Decrement re_receiving on the early exit paths
Summary
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement re_receiving on the early exit paths In the event that rpcrdma_post_recvs() fails to create a work request (due to memory allocation failure, say) or otherwise exits early, we should decrement ep->re_receiving before returning. Otherwise we will hang in rpcrdma_xprt_drain() as re_receiving will never reach zero and the completion will never be triggered. On a system with high memory pressure, this can appear as the following hung task: INFO: task kworker/u385:17:8393 blocked for more than 122 seconds. Tainted: G S E 6.19.0 #3 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u385:17 state:D stack:0 pid:8393 tgid:8393 ppid:2 task_flags:0x4248060 flags:0x00080000 Workqueue: xprtiod xprt_autoclose [sunrpc] Call Trace: <TASK> __schedule+0x48b/0x18b0 ? ib_post_send_mad+0x247/0xae0 [ib_core] schedule+0x27/0xf0 schedule_timeout+0x104/0x110 __wait_for_common+0x98/0x180 ? __pfx_schedule_timeout+0x10/0x10 wait_for_completion+0x24/0x40 rpcrdma_xprt_disconnect+0x444/0x460 [rpcrdma] xprt_rdma_close+0x12/0x40 [rpcrdma] xprt_autoclose+0x5f/0x120 [sunrpc] process_one_work+0x191/0x3e0 worker_thread+0x2e3/0x420 ? __pfx_worker_thread+0x10/0x10 kthread+0x10d/0x230 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x273/0x2b0 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 15788d1d1077ebe029c48842c738876516d85076 , < 7ea69259a60a364f56cf4aa9e2eafb588d1c762b (git)
Affected: 15788d1d1077ebe029c48842c738876516d85076 , < 8cb6b5d8296b1f99a8d36849901ebabfe3f749db (git)
Affected: 15788d1d1077ebe029c48842c738876516d85076 , < 74c39a47856bddcde7874f2196a00143b5cd0af9 (git)
Affected: 15788d1d1077ebe029c48842c738876516d85076 , < 49f53ee4e25297d886f14e31f355ad1c2735ddfb (git)
Affected: 15788d1d1077ebe029c48842c738876516d85076 , < 8127b5fec04757c2a41ed65bca0b3266968efd3b (git)
Affected: 15788d1d1077ebe029c48842c738876516d85076 , < dc3ebd7e2d73dbd4d317785735ffa6c4a6384ddf (git)
Affected: 15788d1d1077ebe029c48842c738876516d85076 , < 7b6275c80a0c81c5f8943272292dfe67730ce849 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.13
Unaffected: 0 , < 5.13 (semver)
Unaffected: 5.15.203 , ≤ 5.15.* (semver)
Unaffected: 6.1.167 , ≤ 6.1.* (semver)
Unaffected: 6.6.130 , ≤ 6.6.* (semver)
Unaffected: 6.12.78 , ≤ 6.12.* (semver)
Unaffected: 6.18.19 , ≤ 6.18.* (semver)
Unaffected: 6.19.9 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/xprtrdma/verbs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7ea69259a60a364f56cf4aa9e2eafb588d1c762b",
              "status": "affected",
              "version": "15788d1d1077ebe029c48842c738876516d85076",
              "versionType": "git"
            },
            {
              "lessThan": "8cb6b5d8296b1f99a8d36849901ebabfe3f749db",
              "status": "affected",
              "version": "15788d1d1077ebe029c48842c738876516d85076",
              "versionType": "git"
            },
            {
              "lessThan": "74c39a47856bddcde7874f2196a00143b5cd0af9",
              "status": "affected",
              "version": "15788d1d1077ebe029c48842c738876516d85076",
              "versionType": "git"
            },
            {
              "lessThan": "49f53ee4e25297d886f14e31f355ad1c2735ddfb",
              "status": "affected",
              "version": "15788d1d1077ebe029c48842c738876516d85076",
              "versionType": "git"
            },
            {
              "lessThan": "8127b5fec04757c2a41ed65bca0b3266968efd3b",
              "status": "affected",
              "version": "15788d1d1077ebe029c48842c738876516d85076",
              "versionType": "git"
            },
            {
              "lessThan": "dc3ebd7e2d73dbd4d317785735ffa6c4a6384ddf",
              "status": "affected",
              "version": "15788d1d1077ebe029c48842c738876516d85076",
              "versionType": "git"
            },
            {
              "lessThan": "7b6275c80a0c81c5f8943272292dfe67730ce849",
              "status": "affected",
              "version": "15788d1d1077ebe029c48842c738876516d85076",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/xprtrdma/verbs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.19",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.9",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Decrement re_receiving on the early exit paths\n\nIn the event that rpcrdma_post_recvs() fails to create a work request\n(due to memory allocation failure, say) or otherwise exits early, we\nshould decrement ep-\u003ere_receiving before returning. Otherwise we will\nhang in rpcrdma_xprt_drain() as re_receiving will never reach zero and\nthe completion will never be triggered.\n\nOn a system with high memory pressure, this can appear as the following\nhung task:\n\n    INFO: task kworker/u385:17:8393 blocked for more than 122 seconds.\n          Tainted: G S          E       6.19.0 #3\n    \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n    task:kworker/u385:17 state:D stack:0     pid:8393  tgid:8393  ppid:2      task_flags:0x4248060 flags:0x00080000\n    Workqueue: xprtiod xprt_autoclose [sunrpc]\n    Call Trace:\n     \u003cTASK\u003e\n     __schedule+0x48b/0x18b0\n     ? ib_post_send_mad+0x247/0xae0 [ib_core]\n     schedule+0x27/0xf0\n     schedule_timeout+0x104/0x110\n     __wait_for_common+0x98/0x180\n     ? __pfx_schedule_timeout+0x10/0x10\n     wait_for_completion+0x24/0x40\n     rpcrdma_xprt_disconnect+0x444/0x460 [rpcrdma]\n     xprt_rdma_close+0x12/0x40 [rpcrdma]\n     xprt_autoclose+0x5f/0x120 [sunrpc]\n     process_one_work+0x191/0x3e0\n     worker_thread+0x2e3/0x420\n     ? __pfx_worker_thread+0x10/0x10\n     kthread+0x10d/0x230\n     ? __pfx_kthread+0x10/0x10\n     ret_from_fork+0x273/0x2b0\n     ? __pfx_kthread+0x10/0x10\n     ret_from_fork_asm+0x1a/0x30"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable function is reached from the RPC-over-RDMA client receive completion path while processing network-delivered RDMA replies from an NFS/RDMA peer. A malicious or compromised remote NFS/RDMA server can influence the receive repost path via reply traffic and credit grants.\nAC:L - The trigger is a deterministic accounting bug on early exits from receive reposting, and a peer can drive reply bursts, high credit grants, and disconnect/reconnect behavior to reach the path. Although memory pressure can help expose one early exit, the rule requires choosing the higher severity option when uncertain.\nPR:N - The remote peer sending RDMA replies does not need privileges on the affected client. The client must already be using an NFS/RDMA transport, but the attacker-side protocol traffic itself is not gated by local kernel privileges.\nUI:N - In a reasonable deployed scenario, the client already has an active NFS/RDMA mount and normal RPC traffic reaches the vulnerable receive path without a further victim action. Exploitation can be driven by the remote peer during ordinary mounted filesystem operation.\nS:U - The effect is confined to the Linux kernel/RPC transport on the same host. It does not cross a separate security authority such as a VM, IOMMU, or sandbox boundary.\nC:N - The bug is a leaked receive-drain accounting reference, not memory corruption or an information disclosure primitive. The investigated paths indicate a hang in disconnect/drain handling rather than exposure of kernel memory.\nI:N - The issue does not provide data modification, arbitrary write, or control-flow manipulation. It only prevents receive-drain completion after the counter is left elevated.\nA:H - The leaked re_receiving count can make rpcrdma_xprt_drain wait forever, producing stuck xprtiod/autoclose work and hung kernel tasks. This is a kernel-level availability failure for the affected NFS/RDMA transport and can persist until recovery or reboot."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:28:10.739Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7ea69259a60a364f56cf4aa9e2eafb588d1c762b"
        },
        {
          "url": "https://git.kernel.org/stable/c/8cb6b5d8296b1f99a8d36849901ebabfe3f749db"
        },
        {
          "url": "https://git.kernel.org/stable/c/74c39a47856bddcde7874f2196a00143b5cd0af9"
        },
        {
          "url": "https://git.kernel.org/stable/c/49f53ee4e25297d886f14e31f355ad1c2735ddfb"
        },
        {
          "url": "https://git.kernel.org/stable/c/8127b5fec04757c2a41ed65bca0b3266968efd3b"
        },
        {
          "url": "https://git.kernel.org/stable/c/dc3ebd7e2d73dbd4d317785735ffa6c4a6384ddf"
        },
        {
          "url": "https://git.kernel.org/stable/c/7b6275c80a0c81c5f8943272292dfe67730ce849"
        }
      ],
      "title": "xprtrdma: Decrement re_receiving on the early exit paths",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43469",
    "datePublished": "2026-05-08T14:22:29.550Z",
    "dateReserved": "2026-05-01T14:12:56.011Z",
    "dateUpdated": "2026-08-05T12:28:10.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43469",
      "date": "2026-09-16",
      "epss": "0.0038",
      "percentile": "0.31656"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43469\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-08T15:16:59.957\",\"lastModified\":\"2026-06-17T10:49:39.700\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nxprtrdma: Decrement re_receiving on the early exit paths\\n\\nIn the event that rpcrdma_post_recvs() fails to create a work request\\n(due to memory allocation failure, say) or otherwise exits early, we\\nshould decrement ep-\u003ere_receiving before returning. Otherwise we will\\nhang in rpcrdma_xprt_drain() as re_receiving will never reach zero and\\nthe completion will never be triggered.\\n\\nOn a system with high memory pressure, this can appear as the following\\nhung task:\\n\\n    INFO: task kworker/u385:17:8393 blocked for more than 122 seconds.\\n          Tainted: G S          E       6.19.0 #3\\n    \\\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\\\" disables this message.\\n    task:kworker/u385:17 state:D stack:0     pid:8393  tgid:8393  ppid:2      task_flags:0x4248060 flags:0x00080000\\n    Workqueue: xprtiod xprt_autoclose [sunrpc]\\n    Call Trace:\\n     \u003cTASK\u003e\\n     __schedule+0x48b/0x18b0\\n     ? ib_post_send_mad+0x247/0xae0 [ib_core]\\n     schedule+0x27/0xf0\\n     schedule_timeout+0x104/0x110\\n     __wait_for_common+0x98/0x180\\n     ? __pfx_schedule_timeout+0x10/0x10\\n     wait_for_completion+0x24/0x40\\n     rpcrdma_xprt_disconnect+0x444/0x460 [rpcrdma]\\n     xprt_rdma_close+0x12/0x40 [rpcrdma]\\n     xprt_autoclose+0x5f/0x120 [sunrpc]\\n     process_one_work+0x191/0x3e0\\n     worker_thread+0x2e3/0x420\\n     ? __pfx_worker_thread+0x10/0x10\\n     kthread+0x10d/0x230\\n     ? __pfx_kthread+0x10/0x10\\n     ret_from_fork+0x273/0x2b0\\n     ? __pfx_kthread+0x10/0x10\\n     ret_from_fork_asm+0x1a/0x30\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/sunrpc/xprtrdma/verbs.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"15788d1d1077ebe029c48842c738876516d85076\",\"lessThan\":\"7ea69259a60a364f56cf4aa9e2eafb588d1c762b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"15788d1d1077ebe029c48842c738876516d85076\",\"lessThan\":\"8cb6b5d8296b1f99a8d36849901ebabfe3f749db\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"15788d1d1077ebe029c48842c738876516d85076\",\"lessThan\":\"74c39a47856bddcde7874f2196a00143b5cd0af9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"15788d1d1077ebe029c48842c738876516d85076\",\"lessThan\":\"49f53ee4e25297d886f14e31f355ad1c2735ddfb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"15788d1d1077ebe029c48842c738876516d85076\",\"lessThan\":\"8127b5fec04757c2a41ed65bca0b3266968efd3b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"15788d1d1077ebe029c48842c738876516d85076\",\"lessThan\":\"dc3ebd7e2d73dbd4d317785735ffa6c4a6384ddf\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"15788d1d1077ebe029c48842c738876516d85076\",\"lessThan\":\"7b6275c80a0c81c5f8943272292dfe67730ce849\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/sunrpc/xprtrdma/verbs.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.13\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.13\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.167\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.130\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.78\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.19\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.9\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.13\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"985804EB-66D2-4D4A-AF5D-D7A87E940EEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.167\",\"matchCriteriaId\":\"2EDC6BAF-B710-4E26-B6AA-D68922EE7B43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.130\",\"matchCriteriaId\":\"C57BB918-DF28-46B3-94F7-144176841267\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.78\",\"matchCriteriaId\":\"28D591F5-B196-4CC9-905C-DC80F116E7A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.19\",\"matchCriteriaId\":\"D394AC60-6F28-435F-872A-CCDF384B8331\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.9\",\"matchCriteriaId\":\"E825E7C3-FEAC-4FD3-8A81-78D7387948C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/49f53ee4e25297d886f14e31f355ad1c2735ddfb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/74c39a47856bddcde7874f2196a00143b5cd0af9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7b6275c80a0c81c5f8943272292dfe67730ce849\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7ea69259a60a364f56cf4aa9e2eafb588d1c762b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8127b5fec04757c2a41ed65bca0b3266968efd3b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8cb6b5d8296b1f99a8d36849901ebabfe3f749db\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dc3ebd7e2d73dbd4d317785735ffa6c4a6384ddf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T12:47:32+00:00",
      "cve": "CVE-2026-43469",
      "id": "CVE-2026-43469",
      "initial_release_date": "2026-05-08T00:00:00+00:00",
      "product_status:known_affected": "246",
      "product_status:known_not_affected": "28",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: xprtrdma: Decrement re_receiving on the early exit paths",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43469.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:17:13Z",
      "cve": "CVE-2026-43469",
      "id": "CVE-2026-43469",
      "initial_release_date": "2026-05-13T03:33:34Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "528",
      "product_status:known_not_affected": "175",
      "product_status:recommended": "279",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43469",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43469.json",
      "version": "18"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.