7.5

CVE-2026-23242

RDMA/siw: Fix potential NULL pointer dereference in header processing

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: Fix potential NULL pointer dereference in header processing

If siw_get_hdr() returns -EINVAL before set_rx_fpdu_context(),
qp->rx_fpdu can be NULL. The error path in siw_tcp_rx_data()
dereferences qp->rx_fpdu->more_ddp_segs without checking, which
may lead to a NULL pointer deref. Only check more_ddp_segs when
rx_fpdu is present.

KASAN splat:
[  101.384271] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7]
[  101.385869] RIP: 0010:siw_tcp_rx_data+0x13ad/0x1e50
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8b6a361b8c482f22ac99c3273285ff16b23fba91
Version < ab61841633d10e56a58c1493a262f0d02dba2f5e
Status affected
Version 8b6a361b8c482f22ac99c3273285ff16b23fba91
Version < 8564dcc12fbb372d984ab45768cae9335777b274
Status affected
Version 8b6a361b8c482f22ac99c3273285ff16b23fba91
Version < ab957056192d6bd068b3759cb2077d859cca01f0
Status affected
Version 8b6a361b8c482f22ac99c3273285ff16b23fba91
Version < ffba40b67663567481fa8a1ed5d2da36897c175d
Status affected
Version 8b6a361b8c482f22ac99c3273285ff16b23fba91
Version < 87b7a036d2c73d5bb3ae2d47dee23de465db3355
Status affected
Version 8b6a361b8c482f22ac99c3273285ff16b23fba91
Version < 714c99e1dc8f85f446e05be02ba83972e981a817
Status affected
Version 8b6a361b8c482f22ac99c3273285ff16b23fba91
Version < ce025f7f5d070596194315eb2e4e89d568b8a755
Status affected
Version 8b6a361b8c482f22ac99c3273285ff16b23fba91
Version < 14ab3da122bd18920ad57428f6cf4fade8385142
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.3
Status affected
Version 0
Version < 5.3
Status unaffected
Version <= 5.10.*
Version 5.10.252
Status unaffected
Version <= 5.15.*
Version 5.15.202
Status unaffected
Version <= 6.1.*
Version 6.1.165
Status unaffected
Version <= 6.6.*
Version 6.6.128
Status unaffected
Version <= 6.12.*
Version 6.12.75
Status unaffected
Version <= 6.18.*
Version 6.18.14
Status unaffected
Version <= 6.19.*
Version 6.19.4
Status unaffected
Version <= *
Version 7.0
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.222
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.