CVE-2026-72129

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially resulting in an out-of-bounds read. This could lead to a denial of service or the disclosure of sensitive information.

This vulnerability is rated as Important severity because an authenticated network client interacting with an NVMe over Fabrics RDMA target can trigger an integer underflow, leading to extensive out-of-bounds kernel memory reads that result in a kernel crash or information disclosure. The affected nvmet-rdma driver is not loaded by default in Red Hat Enterprise Linux and requires the host to be explicitly configured as an NVMe-oF target. Furthermore, exploitation requires target ports to be specifically configured with an inline data size larger than the system page size, limiting widespread exposure under default installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the nvmet_rdma kernel module from loading if NVMe over RDMA functionality is not required. This can be achieved by creating a modprobe configuration file.

1. Create a file named /etc/modprobe.d/disable-nvmet_rdma.conf with the following content:

   install nvmet_rdma /bin/true
   

2. Regenerate the initramfs to ensure the change takes effect on boot:

   dracut -f -v
   

3. Reboot the system for the changes to be fully applied.

This mitigation may impact systems that rely on NVMe over RDMA for storage operations. If NVMe over RDMA is in use, consider configuring inline_data_size to be less than or equal to PAGE_SIZE if your workload permits, though this might affect performance.