CVE Explorer

CVE-2025-68379

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure A NULL pointer dereference can occur in rxe_srq_chk_attr() when ibv_modify_srq() is invoked twice in succession under certain error conditions. The first call may fail in rxe_queue_resize(), which leads rxe_srq_from_attr() to set srq->rq.queue = NULL. The second call then triggers a crash (null deref) when accessing srq->rq.queue->buf->index_mask. Call Trace: <TAS

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:99d40a96e775bc7a8db015b51148d6a5bc4d9c18112d1f13ae7cecaebcf89640

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/infiniband/sw/rxe/rxe_srq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.8"},{"lessThan":"4.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.63","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.13","versionType":"semver"}…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/infiniband/sw/rxe/rxe_srq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"58aca869babd48cb9c3d6ee9e1452c4b9f5266a6","status":"affected","version":"8700e3e7c4857d28ebaa824509934556da0b3e76","versionType":"git"},{"lessThan":"b8f6eeb87a76b6fb1f6381b0b2894568e1b784f7","status":"affected","version":"8700e3e7c4857d28ebaa824509934556da0b3e76","versionType":"git"},{"lessThan":"5dbeb421e137824aa9bd8358bdfc926a3965fc0d","status":"affected","version":"8700e3e7c4…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions

{"url":"https://git.kernel.org/stable/c/503a5e4690ae14c18570141bc0dcf7501a8419b0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/58aca869babd48cb9c3d6ee9e1452c4b9f5266a6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/5dbeb421e137824aa9bd8358bdfc926a3965fc0d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/b8f6eeb87a76b6fb1f6381b0b2894568e1b784f7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/bc4c14a3863cc0e03698caec9a0cdabd779776ee"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6191627340e5c964ee8c1f45a19b86573363d17d539c7dbfefc1636acf42abf0 · sha256:d5c3cd3830a6db49… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer