CVE-2025-71068: linux Out-of-bounds Read
CVSS: 9.8v3.1CriticalModified
AliasesUBUNTU-CVE-2025-71068DEBIAN-CVE-2025-71068
Published 13-01-2026Last modified 19-10-2026
Vulnerability summary
CVE-2025-71068 is a critical (CVSS 9.8) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
0.36%
0%100%
Low · +0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 32 · Related 30DSA-6126-1LSN-0122-1MGASA-2026-0017MGASA-2026-0018USN-8096-1USN-8096-2USN-8096-3USN-8096-4USN-8096-5USN-8116-1USN-8141-1USN-8163-1USN-8163-2USN-8177-1USN-8177-2USN-8179-1USN-8179-2USN-8179-3USN-8179-4USN-8183-1USN-8183-2USN-8184-1USN-8185-1USN-8185-2USN-8203-1USN-8204-1USN-8243-1USN-8245-1USN-8258-1USN-8261-1USN-8265-1USN-8440-1USN-8257-1USN-8260-1
Timeline
- 13-01-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rq_pages index in inline path svc_rdma_copy_inline_range indexed rqstp->rq_pages[rc_curpage] without verifying rc_curpage stays within the allocated page array. Add guards before the first use and after advancing to a new page.
CVSS metrics
5 scores · 4 sources · 2 versionsCritical 9.3Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NSourcesSingle source
Critical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources4 sources · 7.8–9.8
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
28%
Versus all other CVEs
30-day change
+0.01 pp
From 0.35% on 19-09-2026
19-09-202619-10-2026
EPSS score0.36%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu144 products
- linux< 5.15.0-173.183 | < 6.8.0-110.110 | < 6.17.0-22.22
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1103.110 | < 6.8.0-1052.55 | < 6.17.0-1012.12
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ d7cc73972661be4a02a1b09f1d9b3283c6c05154, < a22316f5e9a29e4b92030bd8fb9435fe0eb1d5c9 | ≥ d7cc73972661be4a02a1b09f1d9b3283c6c05154, < 7ba826aae1d43212f3baa53a2175ad949e21926e | ≥ d7cc73972661be4a02a1b09f1d9b3283c6c05154, < 5f140b525180c628db8fa6c897f138194a2de417 | ≥ d7cc73972661be4a02a1b09f1d9b3283c6c05154, < da1ccfc4c452541584a4eae89e337cfa21be6d5a | ≥ d7cc73972661be4a02a1b09f1d9b3283c6c05154, < d1bea0ce35b6095544ee82bb54156fc62c067e58 | 5.11
- linux_kernel≥ 5.11, < 5.15.198 | ≥ 6.0, < 6.6.120 | ≥ 6.12, < 6.12.64 | ≥ 6.18, < 6.18.3 | 6.19:rc1 | 6.19:rc2 | 6.19:rc3 | 6.19:rc4 | 6.19:rc5 | 6.19:rc6 | 6.19:rc7 | 6.19:rc8
Debian1 product
- linuxAll versions (No fix recorded) | < 6.12.69-1 | < 6.18.3-1
3 vendors · 147 products
