CVE-2025-71068
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
In the Linux kernel svcrdma component, svc_rdma_copy_inline_range did not verify that the rc_curpage index stays within the allocated page array, potentially causing out-of-bounds read/write.
Risk Assessment
This vulnerability could allow a remote attacker to corrupt kernel memory, potentially leading to privilege escalation or system crash.
Recommendation
Install the Linux kernel patch that adds bounds checking for the rc_curpage index before use and after advancing to a new page.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rq_pages index in inline path svc_rdma_copy_inline_range indexed rqstp->rq_pages[rc_curpage] without verifying rc_curpage stays within the allocated page array. Add guards before the first use and after advancing to a new page.