CVE-2026-43435

kernel: rust_binder: fix oneway spam detection

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's rust_binder component. The oneway spam detection logic in both TreeRange and ArrayRange was incorrectly implemented or missing, allowing large spamming transactions to go undetected. A local attacker could exploit this vulnerability to cause a Denial of Service (DoS) by overwhelming system resources with undetected spamming transactions.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-770 · Allocation of Resources Without Limits or Throttling