CVE-2026-43469

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

xprtrdma: Decrement re_receiving on the early exit paths

In the event that rpcrdma_post_recvs() fails to create a work request

(due to memory allocation failure, say) or otherwise exits early, we

should decrement ep->re_receiving before returning. Otherwise we will

hang in rpcrdma_xprt_drain() as re_receiving will never reach zero and

the completion will never be triggered.

On a system with high memory pressure, this can appear as the following

hung task:

INFO: task kworker/u385:17:8393 blocked for more than 122 seconds.

Tainted: G S E 6.19.0 #3

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

task:kworker/u385:17 state:D stack:0 pid:8393 tgid:8393 ppid:2 task_flags:0x4248060 flags:0x00080000

Workqueue: xprtiod xprt_autoclose [sunrpc]

Call Trace:

<TASK>

__schedule+0x48b/0x18b0

? ib_post_send_mad+0x247/0xae0 [ib_core]

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References