What’s Vulnerable › Vulnerabilities

CVE-2026-43230: net/rds: Clear reconnect pending bit

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-06 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: net/rds: Clear reconnect pending bit When canceling the reconnect worker, care must be taken to reset the reconnect-pending bit. If the reconnect worker has not yet been scheduled before it is canceled, the reconnect-pending bit will stay on forever.

Affected products

• Linux kernel: from 2.6.30 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16 — fixed in 5.10.252, 5.15.202, 6.1.165, 6.12.75, 6.18.16, 6.19.6

How to fix

Upgrade to a fixed version: Linux kernel 5.10.252, 5.15.202, 6.1.165, 6.12.75. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/14eae5564053ac3973b9369dc674638f22f4765e
• https://git.kernel.org/stable/c/391200c274e90c34071b909ba12e3390b81b767f
• https://git.kernel.org/stable/c/3cf001aff71b1db1b4732a5381b012a114720664
• https://git.kernel.org/stable/c/597c46a42930c963f448720aaf5001dd4ed98af4
• https://git.kernel.org/stable/c/60b347333ec259ac7352f62cbbc365b04c065ff8
• https://git.kernel.org/stable/c/b89fc7c2523b2b0750d91840f4e52521270d70ed
• https://git.kernel.org/stable/c/ba2e3472022f44baddf000621fed150d7a599ea3
• https://git.kernel.org/stable/c/bcf034fa5f66b6a3e787f765a917934a2045cf7a

Get alerted when CVE-2026-43230 or the next vulnerability affects your stack