CVE-2025-71068 — svcrdma: bound check rq_pages index in inline path

Back Back to CVE browser

CRITICAL

svcrdma: bound check rq_pages index in inline path

Published Jan 13, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.35%

Description

svc_rdma_copy_inline_range indexed rqstp->rq_pages[rc_curpage] without verifying rc_curpage stays within the allocated page array. Add guards before the first use and after advancing to a new page.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.11
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.11
- Version
  5.15.198
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  6.12.64
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.18.3
  Status
  unaffected
  Constraints
  <=6.18.*
- Version
  6.19
  Status
  unaffected
  Constraints
  <=*
- Version
  6.6.120
  Status
  unaffected
  Constraints
  <=6.6.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.11	affected	-
0	unaffected	<5.11
5.15.198	unaffected	<=5.15.*
6.12.64	unaffected	<=6.12.*
6.18.3	unaffected	<=6.18.*
6.19	unaffected	<=*
6.6.120	unaffected	<=6.6.*

Red Hat Enterprise Linux 10

kernel

Affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Affected
Red Hat Enterprise Linux 8

kernel-rt

Affected
Red Hat Enterprise Linux 9

kernel

Affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Affected	n/a
Red Hat Enterprise Linux 9	kernel	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.35% 0.00349

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00349

Score over time

Jan–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.35% (0.00349)	26.17th	v5 (v2026.06.15)
Jun 15, 2026	0.13% (0.00129)	2.81th	v5 (v2026.06.15)
Jan 14, 2026	0.02% (0.00018)	3.68th	v4 (v2025.03.14)

Weaknesses (1)

CWE-1285

References (10)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2025-71068		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2429044		Issue Tracking
https://git.kernel.org/stable/c/5f140b525180c628db8fa6c897f138194a2de417		Patch
https://git.kernel.org/stable/c/7ba826aae1d43212f3baa53a2175ad949e21926e		Patch
https://git.kernel.org/stable/c/a22316f5e9a29e4b92030bd8fb9435fe0eb1d5c9		Patch
https://git.kernel.org/stable/c/d1bea0ce35b6095544ee82bb54156fc62c067e58		Patch
https://git.kernel.org/stable/c/da1ccfc4c452541584a4eae89e337cfa21be6d5a		Patch
https://lore.kernel.org/linux-cve-announce/2026011323-CVE-2025-71068-f1a9@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-71068
https://www.cve.org/CVERecord?id=CVE-2025-71068