RDS Vulnerability in Linux Kernel Affects Multiple Implementations

CVE-2026-31425

What is CVE-2026-31425?

The RDS (Reliable Datagram Sockets) protocol in the Linux kernel has a vulnerability that can lead to a system crash during memory registration. When a connection is freshly set up, certain checks fail before establishing the connection, allowing for dereferencing of a null pointer. Specifically, the checks for the connection identifier and its associated queue pair are insufficient, leading to potential kernel instability when sending messages. A fix has been proposed to ensure all identifiers are validated before proceeding with the memory registration process.

References