CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace
In the Linux kernel, the following vulnerability has been resolved:
net/rds: Restrict use of RDS/IB to the initial network namespace
Prevent using RDS/IB in network namespaces other than the initial one. The existing RDS/IB code will not work properly in non-initial network namespaces.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using the Linux kernel or the Microsoft azl3 kernel listed in the advisory are relevant. The issue concerns RDS over InfiniBand (RDS/IB) when it is used from a network namespace other than the initial network namespace.
What access does an attacker need?
The severity vector indicates local access with low privileges is required, and no user interaction is required. Exploitation also depends on being able to use RDS/IB from a non-initial network namespace.
Are default deployments affected?
The provided information does not establish that a default configuration enables or uses RDS/IB. Exposure depends on RDS/IB being available and used outside the initial network namespace.
What is the mitigation if an update cannot be applied immediately?
Prevent use of RDS/IB in non-initial network namespaces. Restrict RDS/IB usage to the initial network namespace until the resolved kernel change is deployed.