ROS-20261005-73-0150

The vulnerability of the irdmacreateuserah function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a attacker to cause a servic...

CVE-2026-23335: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid = ah-scah.ahinfo.ahidx u8 rsvd4; // offset 4 - NEVER SET - LEAK ; rsvd4: 4 bytes of sta...