CVE-2026-46043

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description An issue exists in the RDMA/rxe component where the rxe rcv() function fails to properly validate the incoming packet length before calculating the payload size. The payload size() calculation subtracts the attacker-controlled BTH pad field and the RXE ICRC SIZE from the packet length. If a packet is short or contains a forged non-zero BTH pad, it can cause an integer underflow, passing a negative or underflowed value to subsequent receive-path processes.

Recommendations Update to version 7.0.11-1.1.