CVE-2026-90417

This CVE affects the Linux kernel RDMA/cxgb4 driver (Chelsio cxgb4). The root cause is improper skb ownership in write_tpt_entry() : when the device is in a fatal error state or allocation fails, the function returns early without freeing the caller's preallocated skb. As a result, c4iw_dereg_mr(...

CVE-2026-90417: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix deregskb leak and double free in writetptentry When the device is in the fatal error state, writetptentry returns -EIO before handing the caller's preallocated skb to the transmit path; its allocation-failure...