Security readout for executives and security teams
Plain-English summary
A Linux RNBD server may return leftover memory bytes when communicating across different protocol versions. An unauthenticated network client could potentially receive sensitive kernel or process data. The supplied CVSS score is 7.5, reflecting high confidentiality impact without identified integrity or availability impact.
Executive priority
Treat reachable RNBD servers as a high-priority confidentiality issue. Patch promptly where the feature is active or exposed; validate rather than assuming every Linux host is exploitable. Systems without RNBD server use are lower operational priority pending confirmation.
Technical view
The rnbd-srv response buffer was not completely initialized before transmission. During exchanges between different protocol versions, unused response fields could contain stray bytes and disclose memory remotely. The Linux fix zeroes the entire response buffer before constructing and sending the message.
Likely exposure
Exposure is most likely on Linux hosts running the affected RNBD server functionality, particularly where RNBD clients using different protocol versions can reach it. The bundle identifies affected Linux versions but provides ambiguous boundary data, so distribution-specific kernel status must be confirmed.
Exploitation context
The supplied CVSS vector indicates network reachability, low attack complexity, no privileges, and no user interaction. The bundle marks this CVE as absent from KEV and provides no evidence of active exploitation or a public exploit. Absence from KEV does not prove exploitation is impossible.
Researcher notes
The disclosure mechanism is uninitialized response-buffer content exposed during cross-version protocol exchanges. The patch strategy is complete buffer zeroing. The bundle does not identify a CWE, leaked byte count, required message sequence, affected distributions, or confirmed exploitation. Its version list appears boundary-oriented and should not be interpreted as a precise package matrix.
Mitigation direction
- Install a vendor-supported kernel containing the applicable referenced stable fix.
- Prioritize reachable RNBD servers handling clients with differing protocol versions.
- Restrict RNBD access to authorized, trusted networks while updates are pending.
- Consult the Linux distribution advisory for exact package and branch status.
Validation and detection
- Inventory hosts running RNBD server functionality and record their kernel packages.
- Determine whether RNBD endpoints are reachable from untrusted or unauthorized networks.
- Check each kernel build against distribution guidance and the applicable stable commit.
- After updating, confirm the running kernel includes the fix and RNBD service remains functional.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2026-43184 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N3.93.6LinuxVulnerability scoring details
Base CVSS 3.1 score
7.5HighVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/e4272754063d52c9ad0169865add8816ba696471CVE reference, Linux
- https://git.kernel.org/stable/c/e2cacec7d4291300a282feb3af8eba57b93b15aaCVE reference, Linux
- https://git.kernel.org/stable/c/b646e54d23b9b592d612a2036aab14e0f6c14206CVE reference, Linux
- https://git.kernel.org/stable/c/30868a6a5238849d554295aff3ce61d242d7fad8CVE reference, Linux
- https://git.kernel.org/stable/c/7aac0a30dcf41cdb510526740d9a2ab1520c5d98CVE reference, Linux
- https://git.kernel.org/stable/c/c94ede3c436dfbd9cedd9cb69f604f6fc901b6a2CVE reference, Linux
- https://git.kernel.org/stable/c/852475278ca5e96e0c0275950e1a84203e602b33CVE reference, Linux
- https://git.kernel.org/stable/c/69d26698e4fd44935510553809007151b2fe4db5CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.