CVE-2026-53371

A flaw was found in the Linux kernel's ionic Remote Direct Memory Access (RDMA) driver. A local user can exploit this vulnerability due to an unbounded read operation when displaying the node_desc sysfs file. If the node_desc field is not null-terminated, the system will read beyond its allocated buffer, potentially exposing sensitive information from adjacent memory regions within the ib_device structure.

This vulnerability is rated as Moderate impact because an exploitation attempt requires local authenticated access alongside specific ionic RDMA hardware, confining the blast radius to memory disclosure rather than privilege escalation. Supported Red Hat Enterprise Linux releases are not affected by this flaw, as the vulnerable driver functionality is not present in shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.