CVE-2026-43435

rust_binder: fix oneway spam detection

MEDIUM
5.5
CVSS Score
Published: May 8, 2026 at 02:22 PM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix oneway spam detection The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving the logic after the new range has been inserted. Also, the detection logic for ArrayRange was missing altogether which meant large spamming transactions could get away without being detected. Fix this by implementing an equivalent low_oneway_space() in ArrayRange. Note that I looked into centralizing this logic in RangeAllocator but iterating through 'state' and 'size' got a bit too complicated (for me) and I abandoned this effort.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.18 ≤ v < 6.18.196.18 ≤ v < 6.19.96.18 ≤ v < 7.06.19 ≤ v < 6.19.96.187.0 rc17.0 rc27.0 rc3eafedbc7c050c44744fbdf80bdf3315e860b7513
Vendor states this is fixed in 4fc87c240b8f30e22b7ebaae29d57105589e1c0b (fixed)
Vendor states this is fixed in 8d34c993a9a156e657e43cb95186980745cc3597 (fixed)
Vendor states this is fixed in edf685946c4acbe57cb96f8d5f3c07e9a2e973c8 (fixed)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.18.19 (unaffected)
Vendor states this is fixed in 6.19.9 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card