In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: Fix potential NULL pointer dereference in header processing

If siw_get_hdr() returns -EINVAL before set_rx_fpdu_context(),
qp->rx_fpdu can be NULL. The error path in siw_tcp_rx_data()
dereferences qp->rx_fpdu->more_ddp_segs without checking, which
may lead to a NULL pointer deref. Only check more_ddp_segs when
rx_fpdu is present.

KASAN splat:
[ 101.384271] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7]
[ 101.385869] RIP: 0010:siw_tcp_rx_data+0x13ad/0x1e50

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
8b6a361b8c482f22ac99c3273285ff16b23fba91 affected
< ab61841633d10e56a58c1493a262f0d02dba2f5e
8b6a361b8c482f22ac99c3273285ff16b23fba91 affected
< 8564dcc12fbb372d984ab45768cae9335777b274
8b6a361b8c482f22ac99c3273285ff16b23fba91 affected
< ab957056192d6bd068b3759cb2077d859cca01f0
8b6a361b8c482f22ac99c3273285ff16b23fba91 affected
< ffba40b67663567481fa8a1ed5d2da36897c175d
8b6a361b8c482f22ac99c3273285ff16b23fba91 affected
< 87b7a036d2c73d5bb3ae2d47dee23de465db3355
8b6a361b8c482f22ac99c3273285ff16b23fba91 affected
< 714c99e1dc8f85f446e05be02ba83972e981a817
8b6a361b8c482f22ac99c3273285ff16b23fba91 affected
< ce025f7f5d070596194315eb2e4e89d568b8a755
8b6a361b8c482f22ac99c3273285ff16b23fba91 affected
< 14ab3da122bd18920ad57428f6cf4fade8385142
Linux Linux affected
Version Status Constraints
5.3 affected
—
0 unaffected
< 5.3
5.10.252 unaffected
≤ 5.10.*
5.15.202 unaffected
≤ 5.15.*
6.1.165 unaffected
≤ 6.1.*
6.6.128 unaffected
≤ 6.6.*
6.12.75 unaffected
≤ 6.12.*
6.18.14 unaffected
≤ 6.18.*
6.19.4 unaffected
≤ 6.19.*
7.0-rc1 unaffected
≤ *

No data.

No data.

Vendor Product Confidence Versions
Linux Linux Kernel 99%
Version Status Scheme Platform
[8b6a361b8c482f22ac99c3273285ff16b23fba91,ab61841633d10e56a58c1493a262f0d02dba2f5e)
 affected code_commit —
[8564dcc12fbb372d984ab45768cae9335777b274,ab957056192d6bd068b3759cb2077d859cca01f0)
 affected code_commit —
[ab61841633d10e56a58c1493a262f0d02dba2f5e,ab957056192d6bd068b3759cb2077d859cca01f0)
 affected code_commit —
[ab957056192d6bd068b3759cb2077d859cca01f0,ffba40b67663567481fa8a1ed5d2da36897c175d)
 affected code_commit —
[ffba40b67663567481fa8a1ed5d2da36897c175d,87b7a036d2c73d5bb3ae2d47dee23de465db3355)
 affected code_commit —
[87b7a036d2c73d5bb3ae2d47dee23de465db3355,714c99e1dc8f85f446e05be02ba83972e981a817)
 affected code_commit —
[714c99e1dc8f85f446e05be02ba83972e981a817,ce025f7f5d070596194315eb2e4e89d568b8a755)
 affected code_commit —
[ce025f7f5d070596194315eb2e4e89d568b8a755,14ab3da122bd18920ad57428f6cf4fade8385142)
 affected code_commit —
Linux Linux Kernel 99%
Version Status Scheme Platform
5.3
 affected generic —
[0,5.3)
 unaffected generic —
[5.10.252,5.11.0)
 unaffected semver —
[5.15.202,5.16.0)
 unaffected semver —
[6.1.165,6.2.0)
 unaffected semver —
[6.6.128,6.7.0)
 unaffected semver —
[6.12.75,6.13.0)
 unaffected semver —
[6.18.14,6.19.0)
 unaffected semver —
[6.19.4,6.20.0)
 unaffected semver —
[7.0-rc1,*]
 unaffected generic —

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/14ab3da122bd18920ad57428f6cf4fade8385142 cve-icon cve-icon
https://git.kernel.org/stable/c/714c99e1dc8f85f446e05be02ba83972e981a817 cve-icon cve-icon
https://git.kernel.org/stable/c/8564dcc12fbb372d984ab45768cae9335777b274 cve-icon cve-icon
https://git.kernel.org/stable/c/87b7a036d2c73d5bb3ae2d47dee23de465db3355 cve-icon cve-icon
https://git.kernel.org/stable/c/ab61841633d10e56a58c1493a262f0d02dba2f5e cve-icon cve-icon
https://git.kernel.org/stable/c/ab957056192d6bd068b3759cb2077d859cca01f0 cve-icon cve-icon
https://git.kernel.org/stable/c/ce025f7f5d070596194315eb2e4e89d568b8a755 cve-icon cve-icon
https://git.kernel.org/stable/c/ffba40b67663567481fa8a1ed5d2da36897c175d cve-icon cve-icon
History

Wed, 18 Mar 2026 10:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_get_hdr() returns -EINVAL before set_rx_fpdu_context(), qp->rx_fpdu can be NULL. The error path in siw_tcp_rx_data() dereferences qp->rx_fpdu->more_ddp_segs without checking, which may lead to a NULL pointer deref. Only check more_ddp_segs when rx_fpdu is present. KASAN splat: [ 101.384271] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 101.385869] RIP: 0010:siw_tcp_rx_data+0x13ad/0x1e50
Title RDMA/siw: Fix potential NULL pointer dereference in header processing
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-03-18T10:05:05.108Z

Reserved: 2026-01-13T15:37:45.989Z

Link: CVE-2026-23242

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-18T11:16:15.887

Modified: 2026-03-18T14:52:44.227

Link: CVE-2026-23242

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-03-18T12:12:46Z

Weaknesses

No weakness.