Medium 5.5Published May 19, 2026

CVE-2026-43491net: qrtr: ns: Limit the maximum server registration per node

Updated under an hour ago (Oct 27, 2026, 9:20 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does no bound checking on the number of servers added per node. A malicious client can flood NEW_SERVER messages and exhaust memory. Fix this issue by limiting the maximum number of server registrations to 256 per node. If the NEW_SERVER message is received for an old port, then don't restrict it as it will get replaced. While at it, also rate limit the error messages in the failure path of qrtr_ns_worker(). Note that the limit of 256 is chosen based on the current platform requirements. If requirement changes in the future, this limit can be increased.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Aug 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0c2204a4ad710d95d348ea006f14ba926e842ffd before b48fc702b20233b809f01053232c3cd5083c97b4; from 0c2204a4ad710d95d348ea006f14ba926e842ffd before 991c431077b19176d3fe3bb54054c063776a8cdc; from 0c2204a4ad710d95d348ea006f14ba926e842ffd before 94914731ca0b99899dceadd80d2df00584a688ca; from 0c2204a4ad710d95d348ea006f14ba926e842ffd before e6f6cd501fb54060940a6eb3f4103eeb5e426ae7; from 0c2204a4ad710d95d348ea006f14ba926e842ffd before 3efaad55cad1ded429e3a873bfece389058a526b; from 0c2204a4ad710d95d348ea006f14ba926e842ffd before 35fb4a0c077c5d1049c2628b769e0a1b1e65df0d; from 0c2204a4ad710d95d348ea006f14ba926e842ffd before 868202aa2adae427060a42d5bd663b4d782ec02c; from 0c2204a4ad710d95d348ea006f14ba926e842ffd before d5ee2ff98322337951c56398e79d51815acbf955	CNA record
linux linux_kernel linux:linux_kernel	from 5.7 before 6.6.140; from 6.7 before 6.12.86; from 6.13 before 6.18.27; from 6.19 before 7.0.4	NVD

References

References

https://git.kernel.org/stable/c/b48fc702b20233b809f01053232c3cd5083c97b4
https://git.kernel.org/stable/c/991c431077b19176d3fe3bb54054c063776a8cdc
https://git.kernel.org/stable/c/94914731ca0b99899dceadd80d2df00584a688ca
https://git.kernel.org/stable/c/e6f6cd501fb54060940a6eb3f4103eeb5e426ae7	patch
https://git.kernel.org/stable/c/3efaad55cad1ded429e3a873bfece389058a526b	patch
https://git.kernel.org/stable/c/35fb4a0c077c5d1049c2628b769e0a1b1e65df0d	patch
https://git.kernel.org/stable/c/868202aa2adae427060a42d5bd663b4d782ec02c	patch
https://git.kernel.org/stable/c/d5ee2ff98322337951c56398e79d51815acbf955	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.