CVE-2026-23335

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-23335
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23335.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-23335
Downstream
Related
Published
2026-03-25T10:27:25Z
Modified
2026-09-09T03:30:54Z
Summary
RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

struct irdma_create_ah_resp { // 8 bytes, no padding __u32 ah_id; // offset 0 - SET (uresp.ah_id = ah->sc_ah.ah_info.ah_idx) __u8 rsvd[4]; // offset 4 - NEVER SET <- LEAK };

rsvd[4]: 4 bytes of stack memory leaked unconditionally. Only ah_id is assigned before ib_respond_udata().

The reserved members of the structure were not zeroed.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23335.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b48c24c2d710cf34810c555dcef883a3d35a9c08
Fixed
1f70df004fdd944653013ccc2e1dfd472a693b46
Fixed
14b47c07c69930254f549a17ee245c80a65b1609
Fixed
1b1fac4c7a3ab7f52e9cfb91e5c91216646ca4d8
Fixed
2fd37450d271d74b3847baed284f9cfdf198c6f8
Fixed
cfe962216c164fe2b1c1fb6ac925a7413f5abc84
Fixed
c9bd0007c4bdb7806bbd323287e50f9cf467c51a
Fixed
74586c6da9ea222a61c98394f2fc0a604748438c

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23335.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.14.0
Fixed
5.15.203
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.167
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.130
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.77
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.17
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23335.json"