CVE-2026-64269
A critical flaw in the Linux kernel’s RDMA server allows a remote peer to request an RDMA write with a length larger than the server’s maximum chunk size. This can cause the kernel to read past the intended memory region, potentially leaking host memory or causing a denial of service. The issue has been fixed in the kernel by bounding the descriptor length to the maximum chunk size.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel (RDMA/rtrs-srv) on systems that use RDMA services. System administrators and users running RDMA-enabled applications are affected.
Real-world impact
An attacker could read arbitrary data from the host’s memory, exposing sensitive information, or trigger a crash or connection abort, disrupting services.
Why this severity
The CVSS score of 9.1 reflects that the vulnerability requires no authentication or user interaction, has a low attack complexity, and provides high confidentiality and availability impact.
What to do about it
- 01Upgrade your Linux kernel to a version that includes the fix for CVE-2026-64269.
- 02Reboot the system to load the updated kernel.
NVD-referenced vendor advisory indicating the vulnerability has been resolved in the Linux kernel.
Timeline
- Jul 25, 2026 · 7d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 27, 2026 · 5d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
- Jul 30, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/2912f3d40355dabc08…
- git.kernel.org/stable/c/5a45d0aa1fa50a333c…
- git.kernel.org/stable/c/68c09762172f6224e9…
- git.kernel.org/stable/c/6cada540150894e810…
- git.kernel.org/stable/c/6f40246f4312fdbab5…
- git.kernel.org/stable/c/963af8d97a8c6a1171…
- git.kernel.org/stable/c/da3e44add94b05dfde…