PT-2026-41873 · Linux+2 · Linux Kernel+2
CVE-2026-43491
·
Published
2026-05-19
·
Updated
2026-08-25
CVSS v4.0
6.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The net: qrtr: ns component lacks bound checking on the number of servers added per node. A malicious client can exhaust memory by flooding the system with NEW SERVER messages. The issue is handled within the
qrtr ns worker() function.Recommendations
Limit the maximum number of server registrations to 256 per node.
Rate limit the error messages in the failure path of the
qrtr ns worker() function.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu