Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-52995

In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handing it to visitors rds_for_each_conn_info() and rds_walk_conn_path_info() both hand a caller-allocated on-stack u64 buffer to a per-connection visitor and then copy the full item_len bytes back to user space via rds_info_copy() regardless of how much of the buffer the visitor actually wrote. rds_ib_conn_info_visitor() and rds6_ib_conn_info_visitor() only write a subset of their ou
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2a7729b6cda1c13e58d68ce09c93f325c4eee66999998ae0155c4344ecad5397
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/rds/connection.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"81651e9d7dea1c048d2952f57632a042931d7b43","status":"affected","version":"ec16227e14141e4fd7ae76354c09dadfe2449d9e","versionType":"git"},{"lessThan":"0797b2e6901827694aa9c34c4c72118c8c97fba1","status":"affected","version":"ec16227e14141e4fd7ae76354c09dadfe2449d9e","versionType":"git"},{"lessThan":"5e67cc262afb384e835c3327e9d954eeaedc6a87","status":"affected","version":"ec16227e14141e4fd7ae76354…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/rds/connection.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.30"},{"lessThan":"2.6.30","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"less…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/rds/connection.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"81651e9d7dea1c048d2952f57632a042931d7b43","status":"affected","version":"ec16227e14141e4fd7ae76354c09dadfe2449d9e","versionType":"git"},{"lessThan":"0797b2e6901827694aa9c34c4c72118c8c97fba1","status":"affected","version":"ec16227e14141e4fd7ae76354c09dadfe2449d9e","versionType":"git"},{"lessThan":"5e67cc262afb384e835c3327e9d954eeaedc6a87","status":"affected","version":"ec16227e14141e4fd7ae76354…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/rds/connection.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.30"},{"lessThan":"2.6.30","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"less…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0797b2e6901827694aa9c34c4c72118c8c97fba1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/5e67cc262afb384e835c3327e9d954eeaedc6a87"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/81651e9d7dea1c048d2952f57632a042931d7b43"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/912ba2e5704fdb8bc5decda96dfc1a57838f0099"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/91ce1bb6e4194dc2321748f68145359dcf86e350"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b6ba93a7b71ed443c9843eb12d27ed86f1e52694"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/c7cb9eed8215a790f052f49cdccf577720d2bb62"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/c88eb7e8d8397a8c1db59c425332c5a30b2a1682"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:411d817104fb2bcfbf6f303fbf1274add0be1ad5e1aace1364cc8ce3a3a0bb7b · sha256:baa0365e39ee73ae… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer