Search: CVE-2026-46043

A critical vulnerability (CVE-2026-46043) in the Linux kernel's RDMA/rxe subsystem allows improper validation of packet length fields, leading to a potential underflow in payload size calculation. This flaw occurs because the rxe_rcv() function does not fully validate the packet length against all relevant fields before using payload_size(), which can result in negative payload sizes being passed to subsequent processing. The issue has been fixed by validating the packet length against the full minimum required length, including header size, BTH pad, and RXE_ICRC_SIZE. Multiple Linux Azure kernel versions are affected, and patches are available.