CVE-2026-43184

kernel: rnbd-srv: Zero the rsp buffer before using it

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's rnbd-srv component. This vulnerability arises from the failure to properly clear the response buffer before sending data. A remote client could potentially receive unintended data, leading to information disclosure.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-908 · Use of Uninitialized Resource