PT-2026-2589

CVE-2025-71068

·

Published

2025-11-07

·

Updated

2026-10-21

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contained a flaw in the svcrdma component where the index for accessing pages in the rq pages array within the svc rdma copy inline range function was not properly validated. Specifically, the rc curpage index was used without ensuring it remained within the bounds of the allocated page array. This could potentially lead to out-of-bounds access. The issue was addressed by adding checks before the first use of the index and after advancing to a new page.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-74375
CLSA-2026-1777616064
CLSA-2026-1778276927
CLSA-2026-1782146775
CLSA-2026-1783790425
ECHO-7621-21C8-6A02
LSN-0122-1
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1566
OESA-2026-1567
OESA-2026-1570
OESA-2026-2582
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8243-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1
USN-8440-1
Found an issue in the description? Have something to add? Feel free to write us 👾