CVE-2026-93228

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the svcrdma component where the system fails to reject Write or Reply chunks that have a segcount field set to zero. Because the xdr check write chunk() function only rejects values exceeding rc maxpages, a zero value passes the range check. This allows the pcl alloc write() function to link a svc rdma chunk structure with ch segcount equal to zero onto the rc write pcl or rc reply pcl lists. Additionally, pcl alloc write() previously linked chunks to the parsed chunk list before filling the segment array, potentially exposing incomplete chunks to consumers. The xdr check reply chunk() function is also affected as it utilizes xdr check write chunk().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.