EUVD-2026-81968

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

CVE-2026-90307

CVE-2026-90307 is a heap information disclosure vulnerability in the Linux kernel's RDMA/srp (SCSI RDMA Protocol) subsystem. The root cause is that srp_process_cred_req() and srp_process_aer_req() read fixed-size fields from the receive buffer without verifying that the data was actually present....