A heap out-of-bounds write vulnerability in the Linux kernel RPC-over-RDMA implementation poses a high risk of system compromise or denial of service.

The vulnerability is a heap out-of-bounds write (CWE-787) located in the svc_rdma_sendto.c file. An authenticated attacker can trigger this flaw by sending a crafted NFS READ request, which forces the server to linearize data into a fixed-size buffer without proper bounds checking.

The potential for kernel-level heap corruption allows an attacker to achieve arbitrary code execution or cause an immediate system crash. Given the CVSS score of 8.8, this vulnerability represents a significant risk to system stability and data confidentiality. Successful exploitation could lead to full system takeover and persistent unauthorized access to sensitive information residing on the affected server.

Immediate Action: Monitor the Red Hat Security Advisory portal for the release of kernel patches addressing CVE-2026-13087 and deploy them to all affected systems immediately upon availability.

Proactive Monitoring: Inspect system logs for unusual NFS activity or kernel panic events that may indicate attempted exploitation of the RDMA server reply path.

Compensating Controls: If patching is delayed, restrict access to the RDMA service to trusted network segments and disable the RPC-over-RDMA functionality if it is not strictly required for business operations.

Public Exploit Available: No (exploit_available: unknown)

Due to the high severity of this kernel-level vulnerability, organizations must prioritize the identification of all exposed systems running the affected versions of Red Hat Enterprise Linux. Administrators should establish a rapid deployment pipeline to apply vendor-supplied patches as soon as they are released to prevent potential exploitation of this heap overflow flaw.