CVE-2026-92523 in Linux
Riassunto
di MITRE • 17/09/2026
In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: validate dynamic counter attribute length
RDMA_NLDEV_ATTR_STAT_HWCOUNTERS is a nested attribute whose children are consumed directly with nla_get_u32(). The top-level policy validates only the container, so it does not establish the fixed shape of each child.
Require every child payload to be exactly one u32 before reading it.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.