CVE-2026-43230

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) network protocol. When the reconnect worker is canceled before it has been scheduled, the 'reconnect-pending' bit is not properly cleared. This can lead to a state where the system indefinitely believes a reconnect is pending, potentially causing a denial of service (DoS) by preventing further network operations or consuming system resources.

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. When an RDS connection is shut down and the reconnect worker is canceled before it has been scheduled, the reconnect-pending bit (RDS_RECONNECT_PENDING) is not cleared and remains set indefinitely. This can suppress subsequent reconnect attempts for the affected connection, resulting in a denial of service limited to RDS connection recovery, with no impact on confidentiality or integrity. Red Hat rated this flaw as Moderate severity (CVSS 5.5, local vector with privileges required), while the upstream CVE.org record assigns a higher score (7.5, network vector); the difference reflects Red Hat's assessment that exploitation requires local access to trigger the vulnerable reconnect-worker cancellation path, and that reliable triggering depends on a narrow timing window during connection teardown. Red Hat Enterprise Linux 7, 8, 9, and 10 kernel and kernel-rt update streams, as well as Red Hat In-Vehicle OS 2.0, are not affected because the vulnerable code is not present in those builds; the remaining RHEL 6 ELS kernel stream is out of support scope.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.