Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23335

RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() struct irdma_create_ah_resp { // 8 bytes, no padding __u32 ah_id; // offset 0 - SET (uresp.ah_id = ah->sc_ah.ah_info.ah_idx) __u8 rsvd[4]; // offset 4 - NEVER SET <- LEAK }; rsvd[4]: 4 bytes of stack memory leaked unconditionally. Only ah_id is assigned before ib_respond_udata(). The reserved members of the structure were not zeroed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b48c24c2d710cf34810c555dcef883a3d35a9c08 to < 1f70df004fdd944653013ccc2e1dfd472a693b46affected
  • b48c24c2d710cf34810c555dcef883a3d35a9c08 to < 14b47c07c69930254f549a17ee245c80a65b1609affected
  • b48c24c2d710cf34810c555dcef883a3d35a9c08 to < 1b1fac4c7a3ab7f52e9cfb91e5c91216646ca4d8affected
  • b48c24c2d710cf34810c555dcef883a3d35a9c08 to < 2fd37450d271d74b3847baed284f9cfdf198c6f8affected
  • b48c24c2d710cf34810c555dcef883a3d35a9c08 to < cfe962216c164fe2b1c1fb6ac925a7413f5abc84affected
  • b48c24c2d710cf34810c555dcef883a3d35a9c08 to < c9bd0007c4bdb7806bbd323287e50f9cf467c51aaffected
  • b48c24c2d710cf34810c555dcef883a3d35a9c08 to < 74586c6da9ea222a61c98394f2fc0a604748438caffected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.77 to ≤ 6.12.*unaffected
  • 6.18.17 to ≤ 6.18.*unaffected
  • 6.19.7 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References