← Back to the live CVE advisory feed

CVE-2026-97413: Linux

Severity

9.8 (CRITICAL)

Vendor

LINUX

Affected versions

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 24ad03bfeda05fca04c56677e57fd3d6bc3e9978; 1da177e4c3f41524e886b7

Fixed version

6.12.111

Patch status

Patched

Published

2026-09-24T17:17:18.990

Modified

2026-09-25T05:17:04.603

Why it matters

This matters because the affected product may allow code execution. Prioritize systems that are internet-facing or have privileged access to other infrastructure.

Recommended admin actions

• Prioritize validation immediately due to critical CVSS severity.
• Compare installed versions against the affected version range in the advisory.
• Treat internet-facing systems as higher priority.
• Review logs for suspicious activity related to the affected application or component.

Technical summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write usr_len is read from a network-supplied message field (le16_to_cpu) and used to compute data_len = off – usr_len without validating that usr_len off causing an integer underflow, resulting in data_len wrapping to a huge size_t value which is then passed to the rdma_ev callback as a memory length, leading to out-of-bounds memory access. Fix by reading and validating usr_len

View the official NVD record for CVE-2026-97413

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.