CVE-2026-90413 | Linux Kernel up to 7.2.5 IB isert isert_login_recv_done dlength out-of-bounds

A vulnerability labeled as very critical has been found in Linux Kernel up to 7.2.5. This affects the function isert_login_recv_done of the component IB isert. The manipulation of the argument dlength results in out-of-bounds read.

This vulnerability is known as CVE-2026-90413. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More