CVE-2026-72466

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker could exploit this vulnerability by sending a specially crafted, malformed reply. This could lead to a leak of the receive buffer and drain the Receive queue, potentially causing a Denial of Service (DoS) where the system becomes unresponsive to network requests.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires an active RPC-over-RDMA connection with a rogue or compromised remote peer, limiting the attack surface to specialized RDMA-enabled storage setups. In standard enterprise deployments, InfiniBand or RoCE networking and RPC-over-RDMA transports are not enabled by default. A malicious peer can trigger receive buffer depletion on an established connection, which results in transport stalls and a denial-of-service condition without compromising system integrity or confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.