CVE-2026-43494

The Linux kernel contains a reference-counting bug in the Reliable Datagram Sockets (RDS) subsystem, specifically within the net/rds component. When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the system fails to properly clear rm->data.op_nents, leading to a double-free cond...