CVE-2026-98323

The Linux kernel contains a vulnerability in the RDMA/siw component where the siw_get_hdr() function incorrectly handles fragmented DDP/RDMAP headers received across multiple TCP callbacks. Because subsequent callbacks limit the copy to a fixed length instead of the actual missing bytes, the oper...

EUVD-2026-93308

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the remaining length siwgethdr can receive an extended DDP/RDMAP header across more than one TCP callback. The first callback may receive most of the header, while the next one still...

CVE-2026-23242: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siwgethdr returns -EINVAL before setrxfpducontext, qp-rxfpdu can be NULL. The error path in siwtcprxdata dereferences qp-rxfpdu-moreddpsegs without checking...