CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes
In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: ns: Limit the total number of nodes
Currently, the nameserver doesn't limit the number of nodes it handles. This can be an attack vector if a malicious client starts registering random nodes, leading to memory exhaustion.
Hence, limit the maximum number of nodes to 64. Note that, limit of 64 is chosen based on the current platform requirements. If requirement changes in the future, this limit can be increased.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Configuration
Set the Linux kernel QRTR nameservice (net: qrtr: ns) limit for the total number of nodes to 64 to prevent memory exhaustion from malicious clients registering random nodes.
Linux kernel (net: qrtr: ns) Maximum total number of nodes = 64
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems running a Linux kernel with the QRTR nameserver exposed to local clients are relevant. An attacker needs local access with low privileges; no user interaction is required.
What does exploitation require and what is the impact?
The attacker registers random QRTR nodes until the nameserver's memory is exhausted, causing a denial of service. The affected nameserver previously had no total node limit; the resolved behavior caps it at 64 nodes.
What can defenders do to mitigate or detect this issue?
The provided remediation is the kernel change that limits the QRTR nameserver to 64 total nodes. If that change is not present, monitor for unexpected or rapidly growing QRTR node registrations as an indication of attempted exhaustion.