CVE-2026-23335
- Source
- https://cve.org/CVERecord?id=CVE-2026-23335
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23335.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-23335
- Downstream
- Published
- 2026-03-25T10:27:25.418Z
- Modified
- 2026-04-14T03:48:22.748339Z
- Summary
- RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix kernel stack leak in irdmacreateuser_ah()
struct irdmacreateah_resp { // 8 bytes, no padding __u32 ahid; // offset 0 - SET (uresp.ahid = ah->scah.ahinfo.ah_idx) __u8 rsvd[4]; // offset 4 - NEVER SET <- LEAK };
rsvd[4]: 4 bytes of stack memory leaked unconditionally. Only ahid is assigned before ibrespond_udata().
The reserved members of the structure were not zeroed.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23335.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/14b47c07c69930254f549a17ee245c80a65b1609
- https://git.kernel.org/stable/c/1b1fac4c7a3ab7f52e9cfb91e5c91216646ca4d8
- https://git.kernel.org/stable/c/2fd37450d271d74b3847baed284f9cfdf198c6f8
- https://git.kernel.org/stable/c/74586c6da9ea222a61c98394f2fc0a604748438c
- https://git.kernel.org/stable/c/c9bd0007c4bdb7806bbd323287e50f9cf467c51a
- https://git.kernel.org/stable/c/cfe962216c164fe2b1c1fb6ac925a7413f5abc84
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23335.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-23335
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb48c24c2d710cf34810c555dcef883a3d35a9c08Fixed14b47c07c69930254f549a17ee245c80a65b1609Fixed1b1fac4c7a3ab7f52e9cfb91e5c91216646ca4d8Fixed2fd37450d271d74b3847baed284f9cfdf198c6f8Fixedcfe962216c164fe2b1c1fb6ac925a7413f5abc84Fixedc9bd0007c4bdb7806bbd323287e50f9cf467c51aFixed74586c6da9ea222a61c98394f2fc0a604748438c