Lucene search
+L

6 matches found

OSV
OSV
added 2026/08/15 6:22 a.m.8 views

UBUNTU-CVE-2026-74378

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

7.8CVSS5.7AI score0.00143EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/08/15 6:22 a.m.11 views

CVE-2026-74378

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

7.8CVSS5.8AI score0.00143EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/15 5:58 a.m.39 views

CVE-2026-74378 RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

7.8CVSS0.00143EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/15 5:58 a.m.50 views

CVE-2026-74378

CVE-2026-74378 affects the Linux kernel RDMA/rxe path: get_srq_wqe() reads wqe->dma.num_sge from a shared userspace-mapped buffer. The issue is a TOCTOU heap overflow caused by validating num_sge against max_sge and then re-reading the same field to compute memcpy size, allowing a concurrent u...

7.8CVSS5.7AI score0.00143EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/15 5:58 a.m.23 views

CVE-2026-74378 RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

7.8CVSS5.9AI score
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/08/15 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-74378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validate...

7.8CVSS6.1AI score0.00143EPSS
SaveExploits0References3
Rows per page
Query Builder