CVE-2026-23242

A NULL pointer dereference vulnerability was found in the Linux kernel's Software iWARP (siw) RDMA driver. In siw_tcp_rx_data(), when siw_get_hdr() returns -EINVAL before set_rx_fpdu_context() is called, the qp->rx_fpdu pointer remains NULL. The error handling path then dereferences qp->rx_fpdu->more_ddp_segs without a NULL check, causing a kernel crash.

This flaw affects systems using the Software iWARP (siw) driver for RDMA over TCP. The NULL pointer dereference can be triggered during header processing when receiving malformed RDMA packets. The siw driver is typically used in development or testing environments rather than production RDMA deployments which usually use hardware RDMA adapters.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the siw module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.