CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ

🗓️ 17 Sep 2026 16:08:29Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Heap information leak in Linux kernel RDMA/srp via truncated SRP_CRED_REQ; 8 bytes sent to target.

Source	Link
git	www.git.kernel.org/stable/c/001adf2fe87d1ab677c014a97467bbea5153ae5f
git	www.git.kernel.org/stable/c/0e7ba617514902501514d577647d866e670dad90
git	www.git.kernel.org/stable/c/138eb2f0ef02adfe6ad126afad5b54c56b5046ee
git	www.git.kernel.org/stable/c/3787f4c3e0d813d6c56be9f6dfaf66f8551fb0a7
git	www.git.kernel.org/stable/c/3f7fdf561f1ec3b523c39708df00bd808671668d
git	www.git.kernel.org/stable/c/961ac0f0c5e414abdd6b33fae84b311d9fde0bd0
git	www.git.kernel.org/stable/c/dc2272c00d7c00ee2a69b57f7ca9caaefcbdb8cd
git	www.git.kernel.org/stable/c/fa1b33fdab3e79dce83721ead3220200a2dbec22
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90307.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-90307

19 Sep 2026 03:47Current

Linux kernel SRP_CRED_REQ heap information leak out-of-bounds read