# CVE-2026-97413

Integer underflow in Linux RDMA rtrs-srv enabling remote kernel memory corruption/RCE

- Page: https://www.vulneraibility.com/cve/CVE-2026-97413
- CVSS: 9.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.50% (percentile 43.3)
- Published: 2026-09-24

## Affected versions

- Linux: affected >= 9cb837480424e78ed585376f944088246685aec3 and < 24ad03bfeda05fca04c56677e57fd3d6bc3e9978; >= 9cb837480424e78ed585376f944088246685aec3 and < c76e9123ab91a903396d26e6ab1b5caae5c6b149; >= 9cb837480424e78ed585376f944088246685aec3 and < 54bf38b27afc08a0eb6b732f9c14eb8a4bcb66b5; 5.8; fixed in < 5.8, >= 6.12.111 and <= 6.12.*, >= 6.18.53 and <= 6.18.*, >= 7.2 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Remote kernel memory corruption and likely remote code execution via crafted RDMA message (malicious usr_len causes out-of-bounds kernel access).

## Action

Immediate action required

## Recommendation

Install kernel update with rtrs-srv fix; restrict/untrusted RDMA access until patched.

## References

- [other] https://git.kernel.org/stable/c/6b1e26e70d7ca9f0906af2283558a530eeb1f066
- [other] https://git.kernel.org/stable/c/2c52b2afded988233cd4ccc185cf5147bbc77a76
- [other] https://git.kernel.org/stable/c/b042b4947752df0b3d16e683ac09fb4f7f0e33e0
- [other] https://git.kernel.org/stable/c/24ad03bfeda05fca04c56677e57fd3d6bc3e9978
- [other] https://git.kernel.org/stable/c/c76e9123ab91a903396d26e6ab1b5caae5c6b149
- [other] https://git.kernel.org/stable/c/54bf38b27afc08a0eb6b732f9c14eb8a4bcb66b5

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.