CVE-2026-74377

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the RDMA/rxe component, the responder reads Work Queue Element (WQE) fields directly from a shared queue buffer mapped into userspace for non-SRQ Queue Pairs (QPs). This allows a malicious user to modify fields such as num sge or sge entries while the kernel is processing the WQE, resulting in out-of-bounds reads within the rxe resp check length() and copy data() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.