CVE-2026-13087

Summary

The flaw involves a heap out-of-bounds write vulnerability in the Linux kernel's RPC-over-RDMA server, which can lead to a kernel heap overflow and potential code execution.

Exploitability

Exploitation requires a crafted RPC-over-RDMA client sending a specific type of request, making it moderately difficult. The client must be able to send a large NFS READ request with an empty Write list and no Reply chunk.

Blast radius

If exploited, this vulnerability could result in a denial of service via a kernel crash or potential code execution, impacting the stability and security of the system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest stable kernel version, as a specific patch is available to address this issue.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.