Linux Kernel RDMA Vulnerability in SRPT Allocation
CVE-2026-100075

9.8CRITICAL

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
25 September 2026

What is CVE-2026-100075?

A vulnerability in the Linux kernel's RDMA subsystem relates to improper handling during the allocation of read/write contexts in the srpt_alloc_rw_ctxs() function. When an error occurs during the allocation, existing RDMA contexts are destroyed, but stale values for n_rw_ctx and n_rdma remain, leading to incorrect accounting in subsequent operations. This can result in an invalid calculation of send queue credits, potentially impairing system performance and compromising data integrity. The issue has been resolved by ensuring that the counters are reset and memory pointers are cleared before returning any errors, thereby enhancing the stability and reliability of RDMA operations.

Affected Version(s)

Linux b99f8e4d7bcd3bfbb3cd965918523299370d0cb2

Linux b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 < 717ab4d0614e9446bf8e2de6229464499e4008d6

Linux b99f8e4d7bcd3bfbb3cd965918523299370d0cb2

References

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.