High 7.5Published Mar 18, 2026

CVE-2026-23242RDMA/siw: Fix potential NULL pointer dereference in header processing

Updated under an hour ago (Oct 28, 2026, 10:23 AM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_get_hdr() returns -EINVAL before set_rx_fpdu_context(), qp->rx_fpdu can be NULL. The error path in siw_tcp_rx_data() dereferences qp->rx_fpdu->more_ddp_segs without checking, which may lead to a NULL pointer deref. Only check more_ddp_segs when rx_fpdu is present. KASAN splat: [ 101.384271] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 101.385869] RIP: 0010:siw_tcp_rx_data+0x13ad/0x1e50

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-476
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 8b6a361b8c482f22ac99c3273285ff16b23fba91 before ab61841633d10e56a58c1493a262f0d02dba2f5e; from 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 8564dcc12fbb372d984ab45768cae9335777b274; from 8b6a361b8c482f22ac99c3273285ff16b23fba91 before ab957056192d6bd068b3759cb2077d859cca01f0; from 8b6a361b8c482f22ac99c3273285ff16b23fba91 before ffba40b67663567481fa8a1ed5d2da36897c175d; from 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 87b7a036d2c73d5bb3ae2d47dee23de465db3355; from 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 714c99e1dc8f85f446e05be02ba83972e981a817; from 8b6a361b8c482f22ac99c3273285ff16b23fba91 before ce025f7f5d070596194315eb2e4e89d568b8a755; from 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 14ab3da122bd18920ad57428f6cf4fade8385142	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.3.1 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.14; from 6.19 before 6.19.4; 5.3	NVD

References

References

https://git.kernel.org/stable/c/ab61841633d10e56a58c1493a262f0d02dba2f5e	patch
https://git.kernel.org/stable/c/8564dcc12fbb372d984ab45768cae9335777b274	patch
https://git.kernel.org/stable/c/ab957056192d6bd068b3759cb2077d859cca01f0	patch
https://git.kernel.org/stable/c/ffba40b67663567481fa8a1ed5d2da36897c175d	patch
https://git.kernel.org/stable/c/87b7a036d2c73d5bb3ae2d47dee23de465db3355	patch
https://git.kernel.org/stable/c/714c99e1dc8f85f446e05be02ba83972e981a817	patch
https://git.kernel.org/stable/c/ce025f7f5d070596194315eb2e4e89d568b8a755	patch
https://git.kernel.org/stable/c/14ab3da122bd18920ad57428f6cf4fade8385142	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.