CVE Catalog

CVE-2025-68811

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.44%

36th percentile - higher than 36% of all known CVEs

Summary

In the Linux kernel svcrdma, svc_rdma_copy_inline_range uses rc_curpage (page index) instead of rc_pageoff (byte offset) for memcpy, causing copies to land outside the current page.

Risk Assessment

This could lead to memory corruption, potentially causing system crashes or data corruption.

Recommendation

Apply the patch that uses rc_pageoff as the byte offset for memcpy to ensure copies stay within the current page.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_pageoff. Use rc_pageoff so copies land within the current page. Found by ZeroPath (https://zeropath.com)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS