CVE-2026-43493

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAY_BACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource exhaustion or instability.

This vulnerability is rated as Moderate impact because successful exploitation requires local unprivileged system access and specific timing conditions to trigger improper request handling in the kernel's cryptographic subsystem. In typical Red Hat Enterprise Linux deployments, the pcrypt parallel crypto wrapper is not active by default and is only engaged when cryptographic algorithms explicitly request parallel processing. Consequently, an attacker cannot trigger this condition remotely, limiting the blast radius to local denial of service or kernel memory instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.