CVE-2026-63860
Received Received - Intake

RDMA Core NLA_NUL_STRING Validation Bypass

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These attributes are evaluated as c-string (passed to strcmp), but NLA_STRING doesn't check for the presence of a \0 terminator. Either this needs to switch to nla_strcmp() and needs to adjust printf fmt specifier to not use plain %s, or this needs to use NLA_NUL_STRING. As the code has been this way for long time, it seems to me that userspace does include the terminating nul, even tough its not enforced so far, and thus NLA_NUL_STRING use is the simpler solution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63860
EUVD
EUVD-2026-45544

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the use of NLA_STRING attributes which are evaluated as C-strings but do not enforce a null terminator. This could lead to improper string handling and potential security issues if user space does not include the terminating null byte.

Detection Guidance

This vulnerability is specific to the Linux kernel's RDMA subsystem and involves improper handling of string attributes. Detection requires checking kernel versions and examining RDMA-related kernel modules for the described issue. No direct network or system commands are provided in the context to detect this vulnerability.

Impact Analysis

The impact depends on how the affected kernel code is used. If exploited, it could lead to memory corruption, crashes, or unexpected behavior in applications relying on RDMA/core functionality. However, the issue is mitigated if user space already includes null terminators.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level Linux kernel issue related to string handling in RDMA attributes, which does not involve data processing, storage, or transmission that would typically impact regulatory compliance.

Mitigation Strategies

Apply the latest kernel updates from your Linux distribution to resolve the RDMA subsystem issue. Monitor vendor advisories for patches addressing CVE-2026-63860. If immediate patching is not possible, consider disabling affected RDMA services temporarily until updates are applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63860. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart