THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-74378 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-rea

[NVD] CVE-2026-74378 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-rea

lownvdPublished 2026-08-15

CVE-2026-74378 CVSS: 7.8 HIGH Published: 2026-08-15T06:22:39.597

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe

get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A conc

Indicators of compromise

CVE-2026-74378cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-74378