CVE Explorer

CVE-2026-64269

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg When the server answers an RTRS READ, rdma_write_sg() builds the source scatter/gather entry for the IB_WR_RDMA_WRITE that returns data to the peer. Its length is taken directly from the wire descriptor: plist->length = le32_to_cpu(id->rd_msg->desc[0].len); rd_msg points into the chunk buffer that the remote peer filled via RDMA-WRITE-WITH-IMM (rtrs_srv_

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ae4976cb2d96be3e62f8b51b8bd925862fb1d50821f221f3d2ebac3abbfff93c

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/infiniband/ulp/rtrs/rtrs-srv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"68c09762172f6224e9ddf9b0a60bacbb36e443eb","status":"affected","version":"9cb837480424e78ed585376f944088246685aec3","versionType":"git"},{"lessThan":"6cada540150894e81042a0ae0c796a21a9a877da","status":"affected","version":"9cb837480424e78ed585376f944088246685aec3","versionType":"git"},{"lessThan":"2912f3d40355dabc08fdbaaf2764d02445fe88dc","status":"affected","version":"9cb8374…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/infiniband/ulp/rtrs/rtrs-srv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semve…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":9.1,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/metrics/0/cvssV3_1

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/2912f3d40355dabc08fdbaaf2764d02445fe88dc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/5a45d0aa1fa50a333ce5763ade744e2d89838667"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/68c09762172f6224e9ddf9b0a60bacbb36e443eb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/6cada540150894e81042a0ae0c796a21a9a877da"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/6f40246f4312fdbab5a13cc440adebf95eb2aa66"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/963af8d97a8c6a117134a8d0db1415e0489200b1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/da3e44add94b05dfde56f898421922f5cf35705f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed4c23d54e5188b116e96bba0ed67b3941b44495ed1321cdddc635fd772141ff · sha256:963b471303f8c356… · /containers/cna/references/5

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer