CVE-2026-98361: Linux 6.16

Affected technology

Linux · 0b261d7c1cd32dc93cbc92425fb55e67b24c6638 to before c6f56982ec5c7da83c4bdfcce3b6db18bcfe6425, 0b261d7c1cd32dc93cbc92425fb55e67b24c6638 to before 2d6c6f94d3e1cde049fe5db71dbd5549f10b2de1, 0b261d7c1cd32dc93cbc92425fb55e67b24c6638 to before 769001ce838d907ecaa95f1d0a4e8fc86f761f9f
Linux

Linux · 6.16
Linux

Component: Not specified by the source
File: drivers/infiniband/sw/rxe/rxe_odp.c

What an attacker can do

An unprivileged user can register an ODP MR over such a mapping and have incoming RDMA traffic overwrite the page cache of a file it only holds O_RDONLY, including /etc/passwd or setuid binaries.