vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-92523

RDMA/nldev: validate dynamic counter attribute length

N/A
Published: September 17, 2026 at 04:10 PM UTC
Updated: October 19, 2026 at 10:16 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: validate dynamic counter attribute length RDMA_NLDEV_ATTR_STAT_HWCOUNTERS is a nested attribute whose children are consumed directly with nla_get_u32(). The top-level policy validates only the container, so it does not establish the fixed shape of each child. Require every child payload to be exactly one u32 before reading it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
3c3c1f1416392382faa0238e76a70d7810aab2ef5.16
Vendor states this is fixed in 0bfa897e3e1a61d172f95675b353168bc9290312 (fixed)
Vendor states this is fixed in 74f49255492a62658f36bf2578d7916f1c6ffad1 (fixed)
Vendor states this is fixed in 7828d68ae8cad3463e38def5c91668c84e722596 (fixed)
Vendor states this is fixed in c57e238b475e8e1e514499772b8c0db5768be93f (fixed)
Vendor states this is fixed in d00b0d808ca706a04bd198827319a4a287eff82a (fixed)
Vendor states this is fixed in f8e9315236c8b5155158c6955a758e7960b143e6 (fixed)
Vendor states this is fixed in 5.16 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (6)

Source: cverecord
https://git.kernel.org/stable/c/7828d68ae8cad3463e38def5c91668c84e722596
Source: cverecord
https://git.kernel.org/stable/c/f8e9315236c8b5155158c6955a758e7960b143e6
Source: cverecord
https://git.kernel.org/stable/c/d00b0d808ca706a04bd198827319a4a287eff82a
Source: cverecord
https://git.kernel.org/stable/c/0bfa897e3e1a61d172f95675b353168bc9290312
Source: cverecord
https://git.kernel.org/stable/c/c57e238b475e8e1e514499772b8c0db5768be93f
Source: cverecord
https://git.kernel.org/stable/c/74f49255492a62658f36bf2578d7916f1c6ffad1

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card