CVE-2025-68811

svcrdma: use rc_pageoff for memcpy byte offset

State: Published
Severity: 9.8 Critical
Published: Jan 13, 2026
Updated: Oct 19, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

svcrdma: use rc_pageoff for memcpy byte offset

svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_pageoff. Use rc_pageoff so copies land within the current page.

Found by ZeroPath (https://zeropath.com)

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	8e122582680c6f8acd686a5a2af9c0e46fe90f2d to before e8623e9c451e23d84b870811f42fd872b4089ef6Affected 8e122582680c6f8acd686a5a2af9c0e46fe90f2d to before 2a77c8dd49bccf0ca232be7c836cec1209abb8daAffected 8e122582680c6f8acd686a5a2af9c0e46fe90f2d to before a8ee9099f30654917aa68f55d707b5627e1dbf77Affected
LinuxLinux	6.8Affected before 6.8Not affected 6.12.64 through 6.12.Not affected 6.18.3 through 6.18.Not affected 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.