8.4

CVE-2026-63860

RDMA/core: Prefer NLA_NUL_STRING

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Prefer NLA_NUL_STRING

These attributes are evaluated as c-string (passed to strcmp), but
NLA_STRING doesn't check for the presence of a \0 terminator.

Either this needs to switch to nla_strcmp() and needs to adjust printf fmt
specifier to not use plain %s, or this needs to use NLA_NUL_STRING.

As the code has been this way for long time, it seems to me that userspace
does include the terminating nul, even tough its not enforced so far, and
thus NLA_NUL_STRING use is the simpler solution.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 30dc5e63d6a5ad24894b5512d10b228d73645a44
Version < fcd07d3b8ee7a39b344d73aed69c1a68cd9eacdf
Status affected
Version 30dc5e63d6a5ad24894b5512d10b228d73645a44
Version < 87111356d58d86edb221ba144d261ed83a5b8bbe
Status affected
Version 30dc5e63d6a5ad24894b5512d10b228d73645a44
Version < abda65bdd13084c771842adaac1f652d0660dd82
Status affected
Version 30dc5e63d6a5ad24894b5512d10b228d73645a44
Version < 137b5918931d4d05aa8ea8d3adf67f7224eef63c
Status affected
Version 30dc5e63d6a5ad24894b5512d10b228d73645a44
Version < 5877c043398d5fa0e93919a3d837e5cd7a98a961
Status affected
Version 30dc5e63d6a5ad24894b5512d10b228d73645a44
Version < f2c7b39dde2e61df8157066969cc2a408cd3dcd9
Status affected
Version 30dc5e63d6a5ad24894b5512d10b228d73645a44
Version < c26a0052cceed4c4d380ee5808b699f937fb58d8
Status affected
Version 30dc5e63d6a5ad24894b5512d10b228d73645a44
Version < 6ed3d14fc45d3da6025e7fe4a6a09066856698e2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.16
Status affected
Version 0
Version < 3.16
Status unaffected
Version <= 5.10.*
Version 5.10.258
Status unaffected
Version <= 5.15.*
Version 5.15.209
Status unaffected
Version <= 6.1.*
Version 6.1.175
Status unaffected
Version <= 6.6.*
Version 6.6.141
Status unaffected
Version <= 6.12.*
Version 6.12.91
Status unaffected
Version <= 6.18.*
Version 6.18.33
Status unaffected
Version <= 7.0.*
Version 7.0.10
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.032
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/fcd07d3b8ee7a39b344d73aed69c1a68cd9eacdf
https://git.kernel.org/stable/c/87111356d58d86edb221ba144d261ed83a5b8bbe
https://git.kernel.org/stable/c/abda65bdd13084c771842adaac1f652d0660dd82
https://git.kernel.org/stable/c/137b5918931d4d05aa8ea8d3adf67f7224eef63c
https://git.kernel.org/stable/c/5877c043398d5fa0e93919a3d837e5cd7a98a961
https://git.kernel.org/stable/c/f2c7b39dde2e61df8157066969cc2a408cd3dcd9
https://git.kernel.org/stable/c/c26a0052cceed4c4d380ee5808b699f937fb58d8
https://git.kernel.org/stable/c/6ed3d14fc45d3da6025e7fe4a6a09066856698e2