BaseFortify

Publication date: 2026-01-13

Last updated on: 2026-01-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_pageoff. Use rc_pageoff so copies land within the current page. Found by ZeroPath (https://zeropath.com)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-13

Last Modified

2026-01-14

Generated

2026-07-06

AI Q&A

2026-01-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68811

EUVD

EUVD-2026-2311

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's svcrdma component involves incorrect use of a byte offset in memory copying operations. Specifically, the function svc_rdma_copy_inline_range incorrectly used a page index (rc_curpage) instead of a byte offset (rc_pageoff) when calculating the base for copying data. The fix involves using the correct byte offset (rc_pageoff) to ensure that memory copies occur within the current page, preventing potential memory corruption or data mishandling.

Impact Analysis

If exploited, this vulnerability could lead to improper memory copying within the Linux kernel's svcrdma subsystem, potentially causing memory corruption or data integrity issues. This could affect system stability or security, depending on how the svcrdma service is used in your environment.

Hi! I’m here to help you understand CVE-2025-68811. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70