CVE-2026-43469: xprtrdma: Decrement re_receiving on the early exit paths
In the Linux kernel, the following vulnerability has been resolved:
xprtrdma: Decrement rereceiving on the early exit paths
In the event that rpcrdmapostrecvs() fails to create a work request (due to memory allocation failure, say) or otherwise exits early, we should decrement ep->rereceiving before returning. Otherwise we will hang in rpcrdmaxprtdrain() as rereceiving will never reach zero and the completion will never be triggered.
On a system with high memory pressure, this can appear as the following hung task:
INFO: task kworker/u385:17:8393 blocked for more than 122 seconds. Tainted: G S E 6.19.0 #3 "echo 0 > /proc/sys/kernel/hungtasktimeoutsecs" disables this message. task:kworker/u385:17 state:D stack:0 pid:8393 tgid:8393 ppid:2 taskflags:0x4248060 flags:0x00080000 Workqueue: xprtiod xprtautoclose [sunrpc] Call Trace: <TASK> schedule+0x48b/0x18b0 ? ibpostsendmad+0x247/0xae0 [ibcore] schedule+0x27/0xf0 scheduletimeout+0x104/0x110 waitforcommon+0x98/0x180 ? pfxscheduletimeout+0x10/0x10 waitforcompletion+0x24/0x40 rpcrdmaxprtdisconnect+0x444/0x460 [rpcrdma] xprtrdmaclose+0x12/0x40 [rpcrdma] xprtautoclose+0x5f/0x120 [sunrpc] processonework+0x191/0x3e0 workerthread+0x2e3/0x420 ? pfxworkerthread+0x10/0x10 kthread+0x10d/0x230 ? pfxkthread+0x10/0x10 retfromfork+0x273/0x2b0 ? pfxkthread+0x10/0x10 retfromforkasm+0x1a/0x30
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43469?
CVE-2026-43469 is classified as a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2026-43469?
To fix CVE-2026-43469, update your Linux kernel to the patched version provided by your distribution.
What does CVE-2026-43469 affect?
CVE-2026-43469 affects the xprtrdma functionality within the Linux kernel.
What are the potential impacts of CVE-2026-43469?
Exploitation of CVE-2026-43469 may lead to denial of service or destabilization of the system.
How was CVE-2026-43469 discovered?
CVE-2026-43469 was identified during the review and testing of the memory allocation process in the Linux kernel.