All vulnerabilities

Servers and applications

CVE-2026-98323

RDMA/siw: Bound fragmented header copies by the remaining length

Severity
Critical 9.8
Published
6 Oct 2026
Last changed
19 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
6.1, 6.1.189, 6.6.158, 6.12.112, 6.18.54, 7.2.8
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 6.19 before 7.2.8
  • From 6.13 before 6.18.54
  • From 6.7 before 6.12.112
  • From 6.2 before 6.6.158
All 12 release lines
  • From 5.4.220 before 5.5
  • From 5.10.150 before 5.10.271
  • From 5.11 before 5.15.222
  • From 5.15.75 before 5.15.222
  • From 5.16 before 6.1.189
  • From 5.19.17 before 5.20
  • From 6.0.3 before 6.1
  • From 6.1 before 5.10.271
  • From 6.2 before 6.6.158
  • From 6.7 before 6.12.112
  • From 6.13 before 6.18.54
  • From 6.19 before 7.2.8

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-98323