CVE-2026-53186

The CVE-2026-53186 issue affects the Linux kernel RDMA/srp path. srp_process_rsp() copies sense data using resp_data_len (provided by the SRP target) without bounding against the actual received bytes (wc->byte_len). Although the copy length is limited to SCSI_SENSE_BUFFERSIZE (96 bytes), the ...

EUVD-2026-39277

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRPRSP sense copy by the received length srpprocessrsp copies sense data from rsp-data + respdatalen, where respdatalen is the full 32-bit value supplied by the SRP target and is never checked against the number o...