VDB

DEBIAN-CVE-2025-71068

DEBIAN-CVE-2025-71068 PUBLISHED CVSS 7.800000190734863 HIGH

In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rq_pages index in inline path svc_rdma_copy_inline_range indexed rqstp->rq_pages[rc_curpage] without verifying rc_curpage stays within the allocated page array. Add guards before the first use and after advancing to a new page.

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:14linux6.16.10-1, 6.16.11-1, 6.16.12-1
Debian:13linux0, 6.12.41-1, 6.12.43-1
Debian:12linux6.18.2-1~exp1, 6.18.5-1, 6.18.8-1

Timeline

  • Jan 13, 2026 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›