CVE-2026-43184

rnbd-srv: Zero the rsp buffer before using it

High · published May 6, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
47.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rnbd-srv: Zero the rsp buffer before using it

Before using the data buffer to send back the response message, zero it

completely. This prevents any stray bytes to be picked up by the client

side when there the message is exchanged between different protocol

versions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00579 · 47.0th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    rnbd-srv: Zero the rsp buffer before using it
    cvelistv5