What’s Vulnerable › Vulnerabilities

CVE-2025-68811: svcrdma: use rc_pageoff for memcpy byte offset

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-13 · updated 2026-10-19
• Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_pageoff. Use rc_pageoff so copies land within the current page. Found by ZeroPath (https://zeropath.com)

Affected products

• Linux kernel: 6.8 — fixed in 6.19

How to fix

Upgrade to a fixed version: Linux kernel 6.19. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2a77c8dd49bccf0ca232be7c836cec1209abb8da
• https://git.kernel.org/stable/c/a8ee9099f30654917aa68f55d707b5627e1dbf77
• https://git.kernel.org/stable/c/e8623e9c451e23d84b870811f42fd872b4089ef6

Get alerted when CVE-2025-68811 or the next vulnerability affects your stack