CVE-2026-23335

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A kernel stack leak exists in the irdma create user ah() function within the RDMA/irdma component. The rsvd[4] member of the irdma create ah resp structure leaks 4 bytes of stack memory because the reserved members are not zeroed before use. Specifically, only the ah id field is assigned a value before ib respond udata() is called, leaving the rsvd[4] field uninitialized and exposing stack data. The structure irdma create ah resp contains the ah id variable at offset 0 and the rsvd variable at offset 4.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.