Critical 9.8Published Jan 13, 2026

CVE-2025-71068svcrdma: bound check rq_pages index in inline path

Updated under an hour ago (Oct 26, 2026, 4:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rq_pages index in inline path svc_rdma_copy_inline_range indexed rqstp->rq_pages[rc_curpage] without verifying rc_curpage stays within the allocated page array. Add guards before the first use and after advancing to a new page.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-125
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d7cc73972661be4a02a1b09f1d9b3283c6c05154 before a22316f5e9a29e4b92030bd8fb9435fe0eb1d5c9; from d7cc73972661be4a02a1b09f1d9b3283c6c05154 before 7ba826aae1d43212f3baa53a2175ad949e21926e; from d7cc73972661be4a02a1b09f1d9b3283c6c05154 before 5f140b525180c628db8fa6c897f138194a2de417; from d7cc73972661be4a02a1b09f1d9b3283c6c05154 before da1ccfc4c452541584a4eae89e337cfa21be6d5a; from d7cc73972661be4a02a1b09f1d9b3283c6c05154 before d1bea0ce35b6095544ee82bb54156fc62c067e58	CNA record
linux linux_kernel linux:linux_kernel	from 5.11 before 5.15.198; from 6.0 before 6.6.120; from 6.12 before 6.12.64; from 6.18 before 6.18.3; 6.19; 6.19; 6.19; 6.19; and 4 more ranges	NVD

References

https://git.kernel.org/stable/c/a22316f5e9a29e4b92030bd8fb9435fe0eb1d5c9patch
https://git.kernel.org/stable/c/7ba826aae1d43212f3baa53a2175ad949e21926epatch
https://git.kernel.org/stable/c/5f140b525180c628db8fa6c897f138194a2de417patch
https://git.kernel.org/stable/c/da1ccfc4c452541584a4eae89e337cfa21be6d5apatch
https://git.kernel.org/stable/c/d1bea0ce35b6095544ee82bb54156fc62c067e58patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.