CVE-2026-72018

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the dibs loopback driver, which enables Shared Memory Communications Direct (SMC-D) on standard x86 Linux systems without IBM Z hardware. The issue occurs within the move data() function, which performs a memcpy into the registered DMB (Direct Memory Buffer) without verifying if the sum of the offset and size exceeds the DMB length. A peer-supplied out-of-bounds offset or oversized write allows data to be copied beyond the allocated kernel buffer. This flaw can be exploited by a local user with CAP NET ADMIN capabilities to perform local privilege escalation to root by zeroing credential fields.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.