PT-2026-61177 · Linux · Linux

CVE-2026-63860 · Publicado 2026-07-19 · Atualizado 2026-07-19

NVD

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Prefer NLA NUL STRING

These attributes are evaluated as c-string (passed to strcmp), but NLA STRING doesn't check for the presence of a 0 terminator.

Either this needs to switch to nla strcmp() and needs to adjust printf fmt specifier to not use plain %s, or this needs to use NLA NUL STRING.

As the code has been this way for long time, it seems to me that userspace does include the terminating nul, even tough its not enforced so far, and thus NLA NUL STRING use is the simpler solution.

Correção

Identificadores relacionados

CVE-2026-63860

Produtos afetados

Linux

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-63860 · Nota de Segurança
• https://git.kernel.org/stable/c/87111356d58d86edb221ba144d261ed83a5b8bbe · Nota
• https://git.kernel.org/stable/c/c26a0052cceed4c4d380ee5808b699f937fb58d8 · Nota
• https://git.kernel.org/stable/c/5877c043398d5fa0e93919a3d837e5cd7a98a961 · Nota
• https://git.kernel.org/stable/c/6ed3d14fc45d3da6025e7fe4a6a09066856698e2 · Nota
• https://git.kernel.org/stable/c/f2c7b39dde2e61df8157066969cc2a408cd3dcd9 · Nota
• https://git.kernel.org/stable/c/fcd07d3b8ee7a39b344d73aed69c1a68cd9eacdf · Nota
• https://git.kernel.org/stable/c/abda65bdd13084c771842adaac1f652d0660dd82 · Nota
• https://git.kernel.org/stable/c/137b5918931d4d05aa8ea8d3adf67f7224eef63c · Nota