Threats tagged 'ghsa-g29j-c673-5ccw'

CVE-2026-93228 is a critical vulnerability in the Linux kernel's svcrdma module where Write or Reply chunks with a segcount of zero are improperly accepted. This flaw allows malformed chunks that describe no remote buffer to be linked into parsed chunk lists, potentially leading to memory handling issues. The vulnerability has been resolved by rejecting such zero-segcount chunks at the decode boundary, preventing malformed frames from being processed. No legitimate clients are affected as per RFC 8166, and the fix improves defense in depth by ensuring only fully-populated chunks are processed.