Use of RDS/IB Restricted to Initial Network Namespace in Linux Kernel

Publication date: 2026-06-24

Last updated on: 2026-07-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net/rds: Restrict use of RDS/IB to the initial network namespace Prevent using RDS/IB in network namespaces other than the initial one. The existing RDS/IB code will not work properly in non-initial network namespaces.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-14

Generated

2026-07-15

AI Q&A

2026-06-24

EPSS Evaluated

2026-07-13

NVD

CVE-2026-53077

EUVD

EUVD-2026-38945

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves the Linux kernel's RDS/IB (Reliable Datagram Sockets over InfiniBand) functionality. The issue is that RDS/IB was previously allowed to be used in network namespaces other than the initial one, but the code does not function correctly in these non-initial namespaces. The vulnerability has been resolved by restricting the use of RDS/IB to only the initial network namespace.

Impact Analysis

Because the RDS/IB code does not work properly in non-initial network namespaces, allowing its use outside the initial namespace could lead to unexpected behavior or failures in network communication using RDS/IB. This could impact applications or services relying on RDS/IB in isolated network environments, potentially causing instability or denial of service in those contexts.

Hi! I’m here to help you understand CVE-2026-53077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70