PT-2026-61177 · Linux · Linux

CVE-2026-63860 · Published 2026-07-19 · Updated 2026-07-19

NVD

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Prefer NLA NUL STRING

These attributes are evaluated as c-string (passed to strcmp), but NLA STRING doesn't check for the presence of a 0 terminator.

Either this needs to switch to nla strcmp() and needs to adjust printf fmt specifier to not use plain %s, or this needs to use NLA NUL STRING.

As the code has been this way for long time, it seems to me that userspace does include the terminating nul, even tough its not enforced so far, and thus NLA NUL STRING use is the simpler solution.

Fix

Related Identifiers

CVE-2026-63860

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-63860 · Security Note
• https://git.kernel.org/stable/c/87111356d58d86edb221ba144d261ed83a5b8bbe · Note
• https://git.kernel.org/stable/c/c26a0052cceed4c4d380ee5808b699f937fb58d8 · Note
• https://git.kernel.org/stable/c/5877c043398d5fa0e93919a3d837e5cd7a98a961 · Note
• https://git.kernel.org/stable/c/6ed3d14fc45d3da6025e7fe4a6a09066856698e2 · Note
• https://git.kernel.org/stable/c/f2c7b39dde2e61df8157066969cc2a408cd3dcd9 · Note
• https://git.kernel.org/stable/c/fcd07d3b8ee7a39b344d73aed69c1a68cd9eacdf · Note
• https://git.kernel.org/stable/c/abda65bdd13084c771842adaac1f652d0660dd82 · Note
• https://git.kernel.org/stable/c/137b5918931d4d05aa8ea8d3adf67f7224eef63c · Note