CVE-2026-43842: Null Pointer Dereference
Published Oct 20, 2026
·Updated
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function when msglen is set to 0.
Event History
Oct 20, 2026
CVE Published
via MITRE·08:37 AM
Data Sourced
via MITRE·08:37 AM
RemedyDescription
Data Sourced
via NVD·09:17 AM
DescriptionSeverity
Frequently Asked Questions
1
What does an attacker need to do to trigger the crash?
An unauthenticated attacker must send an RPC message that reaches the rpc_rx_fsm function with msglen set to 0.
2
What is the expected impact of successful exploitation?
Successful exploitation can crash the license manager service, resulting in a denial of service for that service.