CVE-2026-43491

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The net: qrtr: ns component lacks bound checking on the number of servers added per node. A malicious client can exhaust memory by flooding the system with NEW SERVER messages. The issue is handled within the qrtr ns worker() function.

Recommendations Limit the maximum number of server registrations to 256 per node. Rate limit the error messages in the failure path of the qrtr ns worker() function.