CVE-2026-92523

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: validate dynamic counter attribute length RDMA_NLDEV_ATTR_STAT_HWCOUNTERS is a nested attribute whose children are consumed directly with nla_get_u32(). The top-level policy validates only the container, so it does not establish the fixed shape of each child. Require every child payload to be exactly one u32 before reading it.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-25)

Published

2026-09-17

Modified

2026-10-19

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/0bfa897e3e1a61d172f95675b353168bc9290312
• https://git.kernel.org/stable/c/74f49255492a62658f36bf2578d7916f1c6ffad1
• https://git.kernel.org/stable/c/7828d68ae8cad3463e38def5c91668c84e722596
• https://git.kernel.org/stable/c/c57e238b475e8e1e514499772b8c0db5768be93f
• https://git.kernel.org/stable/c/d00b0d808ca706a04bd198827319a4a287eff82a

Check your stackJSON