{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-43184",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-43184"
  ],
  "published": "2026-05-06T11:29:17Z",
  "summary": "rnbd-srv: Zero the rsp buffer before using it",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nrnbd-srv: Zero the rsp buffer before using it\n\nBefore using the data buffer to send back the response message, zero it\ncompletely. This prevents any stray bytes to be picked up by the client\nside when there the message is exchanged between different protocol\nversions.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.165",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43184"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/e4272754063d52c9ad0169865add8816ba696471"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/e2cacec7d4291300a282feb3af8eba57b93b15aa"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/b646e54d23b9b592d612a2036aab14e0f6c14206"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/30868a6a5238849d554295aff3ce61d242d7fad8"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/7aac0a30dcf41cdb510526740d9a2ab1520c5d98"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/c94ede3c436dfbd9cedd9cb69f604f6fc901b6a2"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/852475278ca5e96e0c0275950e1a84203e602b33"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/69d26698e4fd44935510553809007151b2fe4db5"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-08-05T13:16:28Z"
  }
}