PT-2026-2589 · Linux+2 · Linux Kernel+2

Published

2026-01-13

·

Updated

2026-05-11

·

CVE-2025-71068

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contained a flaw in the svcrdma component where the index for accessing pages in the rq pages array within the svc rdma copy inline range function was not properly validated. Specifically, the rc curpage index was used without ensuring it remained within the bounds of the allocated page array. This could potentially lead to out-of-bounds access. The issue was addressed by adding checks before the first use of the index and after advancing to a new page.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-74375
CVE-2025-71068
ECHO-7621-21C8-6A02
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1566
OESA-2026-1567
OESA-2026-1570
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8243-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu