CVE-2026-46043

A flaw was found in the Linux kernel's RDMA/rxe component. The rxe_rcv() function does not adequately validate the BTH pad and ICRC fields of incoming packets before calculating the payload size. A remote attacker could exploit this by sending a specially crafted short packet or a packet with a forged BTH pad. This could lead to an integer underflow, potentially causing unexpected behavior or a denial of service in the receive path.

Red Hat evaluates this vulnerability as Moderate severity because exploitation requires the Soft-RoCE (rdma_rxe) driver to be actively loaded and bound to a network interface, a configuration that is not enabled by default across Red Hat Enterprise Linux deployments. Although malformed network traffic can induce an integer underflow leading to a system crash on hosts with active Soft-RoCE instances, the blast radius is restricted to specifically configured environments. Standard installations that do not utilize software-based RoCE networking remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.