Integer overflow in Linux kernel - CVE-2026-98365

Vulnerability details

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to integer overflow in the Linux kernel RDMA/rxe mr_check_range() function when validating memory ranges supplied in RDMA read or write requests. A remote attacker can send a specially crafted RDMA request whose address and length cause arithmetic wraparound, bypassing the range check and triggering an out-of-bounds read or write and a kernel oops to cause a denial of service.

Affected software

How to mitigate CVE-2026-98365

External References

• https://git.kernel.org/stable/c/2f3b705144e3a3c14184fec6e354680081fe91ec
• https://git.kernel.org/stable/c/3431f525718f6b07da308cda6d44f8cb548bbd37
• https://git.kernel.org/stable/c/5d9426a74fc8cb8f375fcdc19b465a030f9b8cab
• https://git.kernel.org/stable/c/b7d2118660545a00b21e83010ded1a231c6fb8c5
• https://git.kernel.org/stable/c/d10e2a08799e858d3e71ea4169bcd018f216d444

Related Security Bulletins

• Integer overflow in Linux kernel sw rxe driver
• Debian update for linux