CVE-2026-72500 RDMA/bnxt_re: Free SRQ toggle page after firmware teardown

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Free SRQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxtqplibdestroysrq won't write the toggle values to an already-freed...

CVE-2026-72466 xprtrdma: Fix bcall rep leak and unbounded peek

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdmaisbcall decodes a reply's first words to decide whether the frame is a backchannel call. Two issues in that decode path let a short or malformed reply leak the receive buffer...

CVE-2026-72466 xprtrdma: Fix bcall rep leak and unbounded peek

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdmaisbcall decodes a reply's first words to decide whether the frame is a backchannel call. Two issues in that decode path let a short or malformed reply leak the receive buffer...

CVE-2026-72466

Summary of CVE-2026-72466 : In the Linux kernel’s xprtrdma implementation, two path issues in rpcrdma_is_bcall() can leak the receive buffer and drain the Receive queue when decoding a reply. The speculative zero-byte peek uses xdr_inline_decode() without respecting xdr->end, allowing five sub...

EUVD-2026-59363

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed replies rpcrdmawcreceive decrements the transport's Receive count for every completion before it dispatches a successful Receive to rpcrdmareplyhandler. The handler must post a...

CVE-2026-72464

In the Linux kernel, CVE-2026-72464 relates to xprtrdma: Repost Receive buffers for malformed replies. rpcrdma_wc_receive() decrements the transport’s Receive count for every completion and rpcrdma_reply_handler() must post a replacement Receive WR before returning, or ownership of the rep is mov...

CVE-2026-72464 xprtrdma: Repost Receive buffers for malformed replies

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed replies rpcrdmawcreceive decrements the transport's Receive count for every completion before it dispatches a successful Receive to rpcrdmareplyhandler. The handler must post a...

CVE-2026-72464 xprtrdma: Repost Receive buffers for malformed replies

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed replies rpcrdmawcreceive decrements the transport's Receive count for every completion before it dispatches a successful Receive to rpcrdmareplyhandler. The handler must post a...

PT-2026-72652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xprtrdma component where the system fails to repost receive buffers when handling malformed replies. Specifically, the rpcrdma wc receive function decrements the...

CVE-2026-72466: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdmaisbcall decodes a reply's first words to decide whether the frame is a backchannel call. Two issues in that decode path let a short or malformed reply leak the receive buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-72466

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xprtrdma: Fix bcall rep leak and unbounded peek rpcrdmaisbcall decodes a reply's first words to decide whether the frame is a backchannel call. Two issues in...

PT-2026-72654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Two issues in the rpcrdma is bcall function allow a short or malformed reply to leak the receive buffer and drain the Receive queue. First, a speculative peek using xdr inline decode for...

CVE-2026-72464: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed replies rpcrdmawcreceive decrements the transport's Receive count for every completion before it dispatches a successful Receive to rpcrdmareplyhandler. The handler must post a...

Linux Distros Unpatched Vulnerability : CVE-2026-72464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xprtrdma: Repost Receive buffers for malformed replies rpcrdmawcreceive decrements the transport's Receive count for every completion before it dispatches a...

CVE-2026-68129

In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations can fail during the Rx buffer refill loop. If the number of buffers posted to hardware falls below a critical low thresho...

EUVD-2026-55510

In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations can fail during the Rx buffer refill loop. If the number of buffers posted to hardware falls below a critical low thresho...

CVE-2026-68129

CVE-2026-68129 concerns the Linux kernel gve driver. Under extreme memory pressure, Rx buffer allocations can fail during the receive (Rx) buffer refill loop, causing the number of buffers posted to hardware to drop below a critical threshold and leading to a permanent queue stall. Consequences d...

CVE-2026-68129 gve: fix Rx queue stall on alloc failure

In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations can fail during the Rx buffer refill loop. If the number of buffers posted to hardware falls below a critical low thresho...

CVE-2026-64109

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64025

In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict skdataready racing with ktls rx skpsockstrpdataready already checks tlsswhasctxrx and defers to psock-saveddataready when a TLS RX context is present, avoiding a conflict with the TLS strparser's ownership...