CVE-2026-43435
MEDIUM EPSS 2.2%
Published May 8, 20261mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Published May 8, 2026 1mo ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix oneway spam detection The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving the logic after the new range has been inserted. Also, the detection logic for ArrayRange was missing altogether which meant large spamming transactions could get away without being detected. Fix this by implementing an equivalent low_oneway_space() in ArrayRange. Note that I looked into centralizing this logic in RangeAllocator but iterating through 'state' and 'size' got a bit too complicated (for me) and I abandoned this effort.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
2.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 5
References 3
- git.kernel.org https://git.kernel.org/stable/c/4fc87c240b8f30e22b7ebaae29d57105589e1c0b
- git.kernel.org https://git.kernel.org/stable/c/8d34c993a9a156e657e43cb95186980745cc3597
- git.kernel.org https://git.kernel.org/stable/c/edf685946c4acbe57cb96f8d5f3c07e9a2e973c8
Remediation
- git.kernel.org https://git.kernel.org/stable/c/4fc87c240b8f30e22b7ebaae29d57105589e1c0b
- git.kernel.org https://git.kernel.org/stable/c/8d34c993a9a156e657e43cb95186980745cc3597
- git.kernel.org https://git.kernel.org/stable/c/edf685946c4acbe57cb96f8d5f3c07e9a2e973c8