In the Linux kernel, the following vulnerability has been resolved:

svcrdma: bound check rq_pages index in inline path

svc_rdma_copy_inline_range indexed rqstp->rq_pages[rc_curpage] without
verifying rc_curpage stays within the allocated page array. Add guards
before the first use and after advancing to a new page.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d7cc73972661be4a02a1b09f1d9b3283c6c05154 affected < a22316f5e9a29e4b92030bd8fb9435fe0eb1d5c9
d7cc73972661be4a02a1b09f1d9b3283c6c05154 affected < 7ba826aae1d43212f3baa53a2175ad949e21926e
d7cc73972661be4a02a1b09f1d9b3283c6c05154 affected < 5f140b525180c628db8fa6c897f138194a2de417
d7cc73972661be4a02a1b09f1d9b3283c6c05154 affected < da1ccfc4c452541584a4eae89e337cfa21be6d5a
d7cc73972661be4a02a1b09f1d9b3283c6c05154 affected < d1bea0ce35b6095544ee82bb54156fc62c067e58
Linux Linux affected
Version Status Constraints
5.11 affected —
0 unaffected < 5.11
5.15.198 unaffected ≤ 5.15.*
6.6.120 unaffected ≤ 6.6.*
6.12.64 unaffected ≤ 6.12.*
6.18.3 unaffected ≤ 6.18.*
6.19 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/5f140b525180c628db8fa6c897f138194a2de417 cve-icon cve-icon
https://git.kernel.org/stable/c/7ba826aae1d43212f3baa53a2175ad949e21926e cve-icon cve-icon
https://git.kernel.org/stable/c/a22316f5e9a29e4b92030bd8fb9435fe0eb1d5c9 cve-icon cve-icon
https://git.kernel.org/stable/c/d1bea0ce35b6095544ee82bb54156fc62c067e58 cve-icon cve-icon
https://git.kernel.org/stable/c/da1ccfc4c452541584a4eae89e337cfa21be6d5a cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026011323-CVE-2025-71068-f1a9@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-71068 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-71068 cve-icon
History

Mon, 19 Jan 2026 12:45:00 +0000

Type Values Removed Values Added
References

Fri, 16 Jan 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Tue, 13 Jan 2026 15:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rq_pages index in inline path svc_rdma_copy_inline_range indexed rqstp->rq_pages[rc_curpage] without verifying rc_curpage stays within the allocated page array. Add guards before the first use and after advancing to a new page.
Title svcrdma: bound check rq_pages index in inline path
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-09T08:34:18.772Z

Reserved: 2026-01-13T15:30:19.647Z

Link: CVE-2025-71068

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-01-13T16:16:06.187

Modified: 2026-01-19T13:16:15.973

Link: CVE-2025-71068

cve-icon Redhat

Severity : Important

Publid Date: 2026-01-13T00:00:00Z

Links: CVE-2025-71068 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.