CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

DEBIAN-CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

EUVD-2026-111551

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

PT-2026-127741

Name of the Vulnerable Software and Affected Versions llama.cpp versions b8841 through b11864 Description An out-of-bounds write exists in the ggml-rpc RDMA transport rdma recv function. Unauthenticated peers can overflow the rpc-server stack by advertising RDMA capabilities in the HELLO message,...

Linux Distros Unpatched Vulnerability : CVE-2026-118375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers t...

CVE-2026-82942

A data race in the RDMA transport of Apache bRPC versions 1.18.0 allows a remote client to crash the server process denial of service when RDMA is enabled at build time and runtime. Root Cause: When a bRPC server negotiates RDMA with a client, the handshake completes on the TCP fd, but the server...

CVE-2026-82942

Apache bRPC (versions

EUVD-2026-107220

A data race in the RDMA transport of Apache bRPC versions 1.18.0 allows a remote client to crash the server process denial of service when RDMA is enabled at build time and runtime. Root Cause: When a bRPC server negotiates RDMA with a client, the handshake completes on the TCP fd, but the server...

CVE-2026-82942 Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service

A data race in the RDMA transport of Apache bRPC versions 1.18.0 allows a remote client to crash the server process denial of service when RDMA is enabled at build time and runtime. Root Cause: When a bRPC server negotiates RDMA with a client, the handshake completes on the TCP fd, but the server...

CVE-2026-82942 Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service

A data race in the RDMA transport of Apache bRPC versions 1.18.0 allows a remote client to crash the server process denial of service when RDMA is enabled at build time and runtime. Root Cause: When a bRPC server negotiates RDMA with a client, the handshake completes on the TCP fd, but the server...

CVE-2026-82942 Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service

A data race in the RDMA transport of Apache bRPC versions 1.18.0 allows a remote client to crash the server process denial of service when RDMA is enabled at build time and runtime. Root Cause: When a bRPC server negotiates RDMA with a client, the handshake completes on the TCP fd, but the server...

PT-2026-120561

A data race in the RDMA transport of Apache bRPC versions 1.18.0 allows a remote client to crash the server process denial of service when RDMA is enabled at build time and runtime. Root Cause: When a bRPC server negotiates RDMA with a client, the handshake completes on the TCP fd, but the server...

CVE-2026-98352

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Transport client driver. A race condition occurs when a connection setup attempt is interrupted during teardown, causing shared Completion Queue CQ resources to be retained without being released. This flaw may allow an...

Linux Distros Unpatched Vulnerability : CVE-2026-93151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-rdma: fix response resource leak on queue teardown When an nvme target with rdma transport is removed while I/Os are in flight, a response can be posted b...

PT-2026-94947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the nvmet-rdma module when an NVMe target using RDMA transport is removed while I/O operations are in flight. In this scenario, a response may be posted, but th...

CVE-2026-93151: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix response resource leak on queue teardown When an nvme target with rdma transport is removed while I/Os are in flight, a response can be posted but its send completion is never delivered before the connection is to...

CVE-2026-89535

A flaw was found in the svcrdma module of the Linux kernel. A use-after-free vulnerability can occur due to an incorrect order of operations during the teardown of an RDMA Remote Direct Memory Access transport. If a device unregistration process happens concurrently, it can attempt to access a...

CVE-2026-89535

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the cmid. rpcrdmarnunregister follows, but between those two calls the...

Smb kernel SMB Direct Post Send Data

The vulnerability of the smbdirectpostsenddata function in the fs/smb/server/transportrdma.c file of the Smb kernel of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260821-73-0074

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, ...