Use of RDS/IB Restricted to Initial Network Namespace in Linux Kernel

Publication date: 2026-06-24

Last updated on: 2026-07-21

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net/rds: Restrict use of RDS/IB to the initial network namespace Prevent using RDS/IB in network namespaces other than the initial one. The existing RDS/IB code will not work properly in non-initial network namespaces.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-21

Generated

2026-08-04

AI Q&A

2026-06-24

EPSS Evaluated

2026-08-02

NVD

CVE-2026-53077

EUVD

EUVD-2026-38945

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.2 (inc) to 6.6.141 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.91 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.33 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.175 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.209 (exc)
linux	linux_kernel	From 4.3 (inc) to 5.10.258 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves the Linux kernel's RDS/IB (Reliable Datagram Sockets over InfiniBand) functionality. The issue is that RDS/IB was previously allowed to be used in network namespaces other than the initial one, but the code does not function correctly in these non-initial namespaces. The vulnerability has been resolved by restricting the use of RDS/IB to only the initial network namespace.

Impact Analysis

Because the RDS/IB code does not work properly in non-initial network namespaces, allowing its use outside the initial namespace could lead to unexpected behavior or failures in network communication using RDS/IB. This could impact applications or services relying on RDS/IB in isolated network environments, potentially causing instability or denial of service in those contexts.

Hi! I’m here to help you understand CVE-2026-53077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70