CVE-2026-52995

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. This vulnerability allows a local unprivileged user to disclose sensitive kernel memory. When a user queries connection information through getsockopt(SOL_RDS, RDS_INFO_IB_CONNECTIONS) while an RDS connection is not fully established, the kernel fails to properly initialize a buffer. This oversight results in uninitialized stack memory, which may contain kernel text or data pointers, being copied to user space, leading to information disclosure.

Red Hat has evaluated this vulnerability as having a Moderate severity because exploitation requires local unprivileged access alongside an RDMA-capable interface to read leaked kernel stack memory, preventing remote compromise or direct code execution. The Reliable Datagram Sockets (RDS) subsystem is not commonly active or required in standard enterprise installations. Additionally, systems running kernels compiled with automated stack variable initialization mitigate the risk of exposing sensitive kernel memory through this vector.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.