CVE-2026-89529High· 7.0▾ TwilightA flaw was found in the Linux kernel's svcrdma component, which handles Remote Procedure Call over Remote Direct Memory Access (RPC/RDMA) Read operations. This vulnerability occurs because the Read list decoder does not properly validate t…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 38.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 5.9
none → medium
Last analysed / modified upstream
— → 7
none → high
A flaw was found in the Linux kernel's svcrdma component, which handles Remote Procedure Call over Remote Direct Memory Access (RPC/RDMA) Read operations. This vulnerability occurs because the Read list decoder does not properly validate the lengths of incoming data segments. An attacker could send an oversized Read segment, leading to excessive memory allocation and a subsequent resource leak. This resource exhaustion could potentially result in a Denial of Service (DoS) condition, making the system unavailable.
kernel: svcrdma: Reject oversized Read segments at decode time — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-14.
Affected:
No fix planned:
Not affected:
Out of support scope
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89681High· 7.0kernel: nfsd: fix layout fence worker double-reference race (CVE-2026-89681)
CVE-2026-80988Medium· 5.5kernel: NTB: ntb_transport: Fail TX enqueue when the QP link is down (CVE-2026-80988)
CVE-2026-54876High· 7.5Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker…
CVE-2026-5038High· 7.5multer: Multer: Denial of Service via aborted or malformed multipart uploads (CVE-2026-5038)
CVE-2026-80948Medium· 5.5kernel: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() (CVE-2026-80948)
CVE-2026-80997Medium· 5.5kernel: net: ipa: fix stalled modem TX queue after runtime resume (CVE-2026-80997)