CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Fix potential NULL pointer dereference in header processing
If siwgethdr() returns -EINVAL before setrxfpducontext(), qp->rxfpdu can be NULL. The error path in siwtcprxdata() dereferences qp->rxfpdu->moreddpsegs without checking, which may lead to a NULL pointer deref. Only check moreddpsegs when rxfpdu is present.
KASAN splat: [ 101.384271] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 101.385869] RIP: 0010:siwtcprxdata+0x13ad/0x1e50
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23242?
CVE-2026-23242 has been categorized with a medium-severity rating due to the potential for a NULL pointer dereference.
How do I fix CVE-2026-23242?
To fix CVE-2026-23242, ensure that your Linux kernel is updated to the latest stable version where the vulnerability has been patched.
Who is affected by CVE-2026-23242?
CVE-2026-23242 affects users running specific versions of the Linux kernel that implement RDMA/siw functionalities.
What systems are at risk for CVE-2026-23242?
Systems using the RDMA/siw stack in the Linux kernel are at risk for CVE-2026-23242 if they are not updated.
What could happen if CVE-2026-23242 is exploited?
If exploited, CVE-2026-23242 may lead to system crashes or unpredicted behavior due to the NULL pointer dereference.