CVE-2026-97476

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Reliable Datagram Sockets (RDS) implementation where the RDS INFO * family of getsockopt(2) options fails to filter information by the caller's network namespace. Because rds info getsockopt() and rds create() lack proper network namespace or capability checks, the AF RDS protocol is accessible from an unprivileged user namespace. This allows an unprivileged caller in a new user and network namespace to access sensitive information from all RDS sockets on the host, including bound addresses, socket inodes, peer addresses of incoming messages, and TCP or RDS sequence numbers for all connections. The issue stems from the use of file-scope global lists that are not per-network namespace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.