EUVD-2026-82077

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in ccparams debugfs getparam reads a congestion parameter as a u32 but formats it with the signed "%d" into an 11-byte stack buffer. A value with bit 31 set, such as 0x80000000, renders as...

CVE-2026-90416

This stack out-of-bounds read affects the RDMA/mlx5 driver's cc_params debugfs interface in the Linux kernel . The root cause is a format-string mismatch: get_param() reads a congestion control parameter as a u32 but formats it with the signed "%d" specifier into an 11-byte stack buffer . When a ...