VulnSocial

CVE-2026-13087General

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530.

Back to dashboard
0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-22); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-22: 1Mentions · 2026-09-23: 1Technical Details · 2026-09-23: 109-2209-23
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-221
General1
2026-09-231
Disclosure1
Full discourse2 posts
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨High - Linux kernel RPC-over-RDMA heap OOB write in NFS READ reply path (CVE-2026-13087) In net/sunrpc/xprtrdma/svc_rdma_sendto.c, the RPC-over-RDMA server reply path linearizes multi-page NFS READ replies into a fixed 4096-byte heap buffer without bounds checks. A crafted RPC-over-RDMA client can trigger a kernel heap overflow, leading to panic/DoS and potentially code execution via heap object corruption. 👉Affected: Linux kernel (sunrpc/xprtrdma RPC-over-RDMA server) | kernel, kernel-rt

    Post summary

    The tweet discloses a high-severity heap out-of-bounds write vulnerability in the Linux kernel's RPC-over-RDMA server, describing the flaw type, affected component, and possible impacts (DoS/code execution). No PoC, exploit, patch, or active exploitation is mentioned.

    0000070
    309 followersView on X
  • VulDB 🛡@vuldb
    General

    A severe vulnerability was disclosed for Linux Kernel (CVE-2026-13087) https://vuldb.com/vuln/408503

    Post summary

    The tweet discloses a severe Linux Kernel vulnerability (CVE-2026-13087) and links to a vulnerability database entry, but provides no PoC, exploit details, active exploitation evidence, patches, or technical specifics.

    00000110
    2.3K followersView on X

Explore more

Back to dashboard