CVE-2026-82942

Apache bRPC versions prior to 1.18.0 are vulnerable to a data race in the RDMA transport . The issue occurs because the TCP-fd input stream and the RDMA QP input stream share the same Socket::_read_buf, preferred_index, and parsing_context without proper synchronization. An unauthenticated remote...