CVE-2026-43494

A flaw was found in the Linux kernel, specifically within the net/rds module. When a zerocopy page pin operation fails, a counter used for memory management (op_nents) is not correctly reset. This can result in a double-free vulnerability, where the same memory is released twice. A local attacker could potentially exploit this to cause the system to crash (denial of service) or, in some cases, execute unauthorized code.

This Important flaw in the Linux kernel's net/rds module stems from an improper reset of a memory management counter during a failed zerocopy page pin operation, leading to a double-free. A local attacker could leverage this to achieve a denial of service or, in some scenarios, arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.