-

CVE-2026-97954

net/rds: fix tcp stream corruption with large pages

In the Linux kernel, the following vulnerability has been resolved:

net/rds: fix tcp stream corruption with large pages

rds_message_map_pages() assigns PAGE_SIZE bytes to every
scatterlist entry, even when total_len ends in a partial page. The RDS
congestion map is defined as 8192 bytes, so on systems with PAGE_SIZE
greater than 8192 the scatterlist maps bytes beyond the end of the
congestion map.  RDS-TCP transmits the SG contents according to those
lengths, so the extra bytes become part of the TCP RDS stream and are
interpreted as subsequent RDS message headers, corrupting the stream.

Limit the final scatterlist mapping to the number of bytes remaining.
This has no effect on systems with a 4K page size and allows RDS-TCP to
be used on systems with 16K and larger page sizes.

The RDS selftest, which previously hung on 16K pages, now passes.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 7875e18e09961d29f30424c5e2e48e704dc3789b
Version < 7d7705ce73eac1de1146706d887bc969a48ebb6d
Status affected
Version 7875e18e09961d29f30424c5e2e48e704dc3789b
Version < 3230961a72b312d0e47101d1428084d0a02bff52
Status affected
Version 7875e18e09961d29f30424c5e2e48e704dc3789b
Version < ee74a4b42e3a2f9635ba376be9e58311322eebe4
Status affected
Version 7875e18e09961d29f30424c5e2e48e704dc3789b
Version < 348492de88bc6ea06b6f3dd544a7a00d908a807b
Status affected
Version 7875e18e09961d29f30424c5e2e48e704dc3789b
Version < ef3565a418b8309589fe9b5df098a892c9146b06
Status affected
Version 7875e18e09961d29f30424c5e2e48e704dc3789b
Version < 8cbfeb54bf781d9693778aaba133bb58c0285332
Status affected
Version 7875e18e09961d29f30424c5e2e48e704dc3789b
Version < f4649a716be20ef9272f97a166dea1825ba5b554
Status affected
Version 7875e18e09961d29f30424c5e2e48e704dc3789b
Version < 2ac09b5353fe6858411fdc8c6efa60d832e20f13
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.30
Status affected
Version 0
Version < 2.6.30
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ef3565a418b8309589fe9b5df098a892c9146b06
https://git.kernel.org/stable/c/8cbfeb54bf781d9693778aaba133bb58c0285332
https://git.kernel.org/stable/c/f4649a716be20ef9272f97a166dea1825ba5b554
https://git.kernel.org/stable/c/2ac09b5353fe6858411fdc8c6efa60d832e20f13
https://git.kernel.org/stable/c/3230961a72b312d0e47101d1428084d0a02bff52
https://git.kernel.org/stable/c/348492de88bc6ea06b6f3dd544a7a00d908a807b
https://git.kernel.org/stable/c/7d7705ce73eac1de1146706d887bc969a48ebb6d
https://git.kernel.org/stable/c/ee74a4b42e3a2f9635ba376be9e58311322eebe4