CVE-2026-92523EPSS p6.0%
CVE-2026-92523CVE-2026-92523
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: validate dynamic counter attribute length
RDMA_NLDEV_ATTR_STAT_HWCOUNTERS is a nested attribute whose children are
consumed directly with nla_get_u32(). The top-level policy validates only
the container, so it does not establish the fixed shape of each child.
Require every child payload to be exactly one u32 before reading it.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 6.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-17 |