CVE-2026-74584

🗓️ 22 Aug 2026 14:28:07Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 100 Views🌐 WEB

Kernel memory leak in Linux bnxt_re RDMA driver via unzeroed shared page exposed to userspace.

Reporter	Title	Published	Views	Family All 60
Circl	CVE-2026-74584	15 Sep 202612:46	–	circl
Cvelist	CVE-2026-74584 RDMA/bnxt_re: zero shared page before exposing to userspace	22 Aug 202614:28	–	cvelist
Debian CVE	CVE-2026-74584	22 Aug 202614:28	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	4 Sep 202600:00	–	oraclelinux
EUVD	EUVD-2026-64332	22 Aug 202614:28	–	euvd
NVD	CVE-2026-74584	22 Aug 202615:16	–	nvd
Tenable Nessus	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	25 Sep 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)	4 Sep 202600:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:4254-1)	18 Sep 202600:00	–	nessus
Tenable Nessus	SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4282-1)	23 Sep 202600:00	–	nessus

Vulners

CNA

Node

linux linux_kernelRange4.11–5.10.260

linux linux_kernelRange5.11.0–5.15.211

linux linux_kernelRange5.16.0–6.1.177

linux linux_kernelRange6.2.0–6.6.144

linux linux_kernelRange6.7.0–6.12.95

linux linux_kernelRange6.13.0–6.18.37

linux linux_kernelRange6.19.0–7.0.14

linux linux_kernelRange7.1.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/infiniband/hw/bnxt_re/ib_verbs.c"
    ],
    "versions": [
      {
        "version": "1ac5a404797523cedaf424a3aaa3cf8f9548dff8",
        "lessThan": "53c97e9882f4e747b4ac31b211317c2eba541af9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1ac5a404797523cedaf424a3aaa3cf8f9548dff8",
        "lessThan": "9896bdfd21d918e9f26a52bc6109cc77970ee0b1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1ac5a404797523cedaf424a3aaa3cf8f9548dff8",
        "lessThan": "9128c2411b83a64c0a69d2ff059c741bde25a9cc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1ac5a404797523cedaf424a3aaa3cf8f9548dff8",
        "lessThan": "c19b360fa10c521c0b681875cdaa51545d45a491",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1ac5a404797523cedaf424a3aaa3cf8f9548dff8",
        "lessThan": "a3ed2daab02b2a706e882ad31b5c3c4f33cb5bb1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1ac5a404797523cedaf424a3aaa3cf8f9548dff8",
        "lessThan": "e2b143df29003d2704b51f62e9297006953dbacb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1ac5a404797523cedaf424a3aaa3cf8f9548dff8",
        "lessThan": "c75f8ce4baa29ae57fe615c6a2c5101f59b8b89a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1ac5a404797523cedaf424a3aaa3cf8f9548dff8",
        "lessThan": "f6b079629becfa977f9c51fe53ad2e6dcc55ef44",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/infiniband/hw/bnxt_re/ib_verbs.c"
    ],
    "versions": [
      {
        "version": "4.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.260",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.211",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.177",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.144",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.95",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.37",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.14",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/c75f8ce4baa29ae57fe615c6a2c5101f59b8b89a
git	www.git.kernel.org/stable/c/53c97e9882f4e747b4ac31b211317c2eba541af9
git	www.git.kernel.org/stable/c/e2b143df29003d2704b51f62e9297006953dbacb
git	www.git.kernel.org/stable/c/9128c2411b83a64c0a69d2ff059c741bde25a9cc
git	www.git.kernel.org/stable/c/9896bdfd21d918e9f26a52bc6109cc77970ee0b1
git	www.git.kernel.org/stable/c/f6b079629becfa977f9c51fe53ad2e6dcc55ef44
git	www.git.kernel.org/stable/c/c19b360fa10c521c0b681875cdaa51545d45a491
git	www.git.kernel.org/stable/c/a3ed2daab02b2a706e882ad31b5c3c4f33cb5bb1

Parameter	Position	Path	Description	CWE
BNXT_RE_MMAP_SH_PAGE	path	/dev/infiniband/uverbsX	Kernel information disclosure: an uninitialized shared page mapped to userspace via /dev/infiniband/uverbsX mmap leaks kernel memory data (4092 bytes beyond the 4-byte AVID) due to BNXT_RE_MMAP_SH_PAGE not being zeroed.	CWE-200
BNXT_RE_AVID_OFFT (0x10)	path	/dev/infiniband/uverbsX	Kernel information disclosure: an uninitialized shared page mapped to userspace via /dev/infiniband/uverbsX mmap leaks kernel memory data (4092 bytes beyond the 4-byte AVID) due to BNXT_RE_MMAP_SH_PAGE not being zeroed.	CWE-200
IB_USER_VERBS_CMD_GET_CONTEXT	path	/dev/infiniband/uverbsX	Kernel information disclosure: an uninitialized shared page mapped to userspace via /dev/infiniband/uverbsX mmap leaks kernel memory data (4092 bytes beyond the 4-byte AVID) due to BNXT_RE_MMAP_SH_PAGE not being zeroed.	CWE-200

25 Aug 2026 06:18Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.1

EPSS0.00182