---
id: CVE-2025-68811
title: 'svcrdma: use rc_pageoff for memcpy byte offset'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  svcrdma: use rc_pageoff for memcpy byte offset

  svc_rdma_copy_inline_range added rc_curpage (page index) to the page
  base instead of the byte offset rc_pageoff. Use rc_…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 8e122582680c6f8acd686a5a2af9c0e46fe90f2d <
    e8623e9c451e23d84b870811f42fd872b4089ef6
  - >-
    Linux >= 8e122582680c6f8acd686a5a2af9c0e46fe90f2d <
    2a77c8dd49bccf0ca232be7c836cec1209abb8da
  - >-
    Linux >= 8e122582680c6f8acd686a5a2af9c0e46fe90f2d <
    a8ee9099f30654917aa68f55d707b5627e1dbf77
  - Linux 6.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-06-16T16:28:47.245013Z'
published: '2026-01-13'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T18:05:08.265Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-68811'
references:
  - url: 'https://git.kernel.org/stable/c/e8623e9c451e23d84b870811f42fd872b4089ef6'
  - url: 'https://git.kernel.org/stable/c/2a77c8dd49bccf0ca232be7c836cec1209abb8da'
  - url: 'https://git.kernel.org/stable/c/a8ee9099f30654917aa68f55d707b5627e1dbf77'
tags:
  - cve.org
epss: 0.0053
epssPercentile: 0.43634
ingestedAt: '2026-10-19T18:35:50.148Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

svcrdma: use rc_pageoff for memcpy byte offset

svc_rdma_copy_inline_range added rc_curpage (page index) to the page
base instead of the byte offset rc_pageoff. Use rc_pageoff so copies
land within the current page.

Found by ZeroPath (https://zeropath.com)

## Affected

- `Linux >= 8e122582680c6f8acd686a5a2af9c0e46fe90f2d < e8623e9c451e23d84b870811f42fd872b4089ef6`
- `Linux >= 8e122582680c6f8acd686a5a2af9c0e46fe90f2d < 2a77c8dd49bccf0ca232be7c836cec1209abb8da`
- `Linux >= 8e122582680c6f8acd686a5a2af9c0e46fe90f2d < a8ee9099f30654917aa68f55d707b5627e1dbf77`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.