CVE-2026-43184
MediumSummary
A vulnerability in the Linux kernel has been resolved in rnbd-srv, related to not zeroing the rsp buffer before use. Failure to zero the buffer could lead to unintended data being sent to the client.
Risk Assessment
Organizations may be exposed to the risk of leaking sensitive data that could be inadvertently sent to clients during message exchanges.
Recommendation
It is recommended to update the Linux kernel to the latest version to ensure that the rsp buffer is properly zeroed before use.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchanged