CVE-2026-23242 RDMA/siw: Fix potential NULL pointer dereference in header processing

🗓️ 18 Mar 2026 10:05:05Reported by LinuxType

Fix NULL pointer dereference in siw header processing when siw_get_hdr() returns error before set_rx_fpdu_context().

Reporter	Title	Published	Views	Family All 114
ATTACKERKB	CVE-2026-23242	18 Mar 202610:05	–	attackerkb
AstraLinux	Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1	10 Aug 202607:11	–	astralinux
BDU FSTEC	The vulnerability in the driver/infiniband/sw/siw/siw_qp_rx.c component of the Linux operating system allows a hacker to cause a service failure.	17 Aug 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-23242 affecting package kernel for versions less than 6.6.130.1-1	30 Mar 202616:12	–	cbl_mariner
Circl	CVE-2026-23242	2 Apr 202617:33	–	circl
CNNVD	Linux kernel 安全漏洞	18 Mar 202600:00	–	cnnvd
CVE	CVE-2026-23242	18 Mar 202610:05	–	cve
Debian	[SECURITY] [DLA 4561-1] linux-6.1 security update	2 May 202608:40	–	debian
Debian	[SECURITY] [DLA 4606-1] linux security update	29 May 202616:36	–	debian
Debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/infiniband/sw/siw/siw_qp_rx.c"
    ],
    "versions": [
      {
        "version": "8b6a361b8c482f22ac99c3273285ff16b23fba91",
        "lessThan": "ab61841633d10e56a58c1493a262f0d02dba2f5e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8b6a361b8c482f22ac99c3273285ff16b23fba91",
        "lessThan": "8564dcc12fbb372d984ab45768cae9335777b274",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8b6a361b8c482f22ac99c3273285ff16b23fba91",
        "lessThan": "ab957056192d6bd068b3759cb2077d859cca01f0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8b6a361b8c482f22ac99c3273285ff16b23fba91",
        "lessThan": "ffba40b67663567481fa8a1ed5d2da36897c175d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8b6a361b8c482f22ac99c3273285ff16b23fba91",
        "lessThan": "87b7a036d2c73d5bb3ae2d47dee23de465db3355",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8b6a361b8c482f22ac99c3273285ff16b23fba91",
        "lessThan": "714c99e1dc8f85f446e05be02ba83972e981a817",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8b6a361b8c482f22ac99c3273285ff16b23fba91",
        "lessThan": "ce025f7f5d070596194315eb2e4e89d568b8a755",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8b6a361b8c482f22ac99c3273285ff16b23fba91",
        "lessThan": "14ab3da122bd18920ad57428f6cf4fade8385142",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/infiniband/sw/siw/siw_qp_rx.c"
    ],
    "versions": [
      {
        "version": "5.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.3",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.252",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.202",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.165",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.128",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.75",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.14",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.4",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/714c99e1dc8f85f446e05be02ba83972e981a817
git	www.git.kernel.org/stable/c/ce025f7f5d070596194315eb2e4e89d568b8a755
git	www.git.kernel.org/stable/c/87b7a036d2c73d5bb3ae2d47dee23de465db3355
git	www.git.kernel.org/stable/c/ab957056192d6bd068b3759cb2077d859cca01f0
git	www.git.kernel.org/stable/c/ab61841633d10e56a58c1493a262f0d02dba2f5e
git	www.git.kernel.org/stable/c/8564dcc12fbb372d984ab45768cae9335777b274
git	www.git.kernel.org/stable/c/ffba40b67663567481fa8a1ed5d2da36897c175d
git	www.git.kernel.org/stable/c/14ab3da122bd18920ad57428f6cf4fade8385142

05 Aug 2026 12:20Current

CVSS 3.17.5

EPSS0.00449