CVE-2026-23335

A flaw was found in the Linux kernel's RDMA/irdma component. This vulnerability, located in the irdma_create_user_ah() function, is caused by uninitialized reserved memory. An attacker could potentially exploit this to leak 4 bytes of sensitive stack memory, leading to information disclosure.

This flaw affects systems with Intel RDMA (irdma) adapters. The irdma_create_ah_resp structure's reserved bytes are not zeroed before being copied to userspace, leaking 4 bytes of kernel stack memory. The leaked data is limited in size and requires RDMA interface access. The current CVSS marks this as A:H but it should be C:L for information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.