CVE-2026-72465

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker can exploit this by sending specially crafted RPC over RDMA replies containing an inflated credit grant. This vulnerability can lead to excessive allocation of Receive Work Requests, potentially causing a Denial of Service (DoS) due to resource exhaustion and system instability.

This flaw is rated as Moderate impact because RPC over RDMA is an optional transport utilized primarily within controlled, dedicated high-performance computing or storage fabrics rather than exposed to untrusted public networks. An untrusted or rogue RDMA peer sending unprompted responses with excessive credit values can trigger uncontrolled memory consumption on the client endpoint, causing service disruption. Systems that do not mount RPC services over RDMA or that communicate solely with trusted peers are not susceptible to this attack.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.