CVE-2026-97413

Summary

This flaw involves an integer underflow in the RDMA/rtrs-srv process_read and process_write functions, allowing a malicious client to cause out-of-bounds memory access. It matters because it can lead to severe system instability or potential privilege escalation.

Exploitability

Exploitation requires a malicious RDMA client with network access. The vulnerability is hard to exploit due to the need for precise control over the network message fields.

Blast radius

If exploited, this could result in unauthorized access to sensitive system memory, potentially leading to system compromise or data leakage.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the Linux kernel version 6.1.17 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.