Out-of-Bounds Vulnerability in Linux Kernel Affecting RDMA/RXE

CVE-2026-80863

What is CVE-2026-80863?

A vulnerability in the Linux kernel’s RDMA/rxe implementation can lead to an out-of-bounds write scenario during the free operation of resources. The issue arises when the 'max_dest_rd_atomic' parameter is updated before freeing associated resources, potentially causing a slab out-of-bounds write. This flaw was identified in the free_rd_atomic_resources function, as it does not properly validate array indices against the new allocation size. It has significant implications for system stability and security, necessitating prompt attention from system administrators to apply relevant patches.

References