CVE-2026-74378: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

CVE-2026-74377: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...

CVE-2026-74296: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Free the UAR index returned by the hardware...

CVE-2026-74345: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siwsocketdisassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-72495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Avoid repeated requests to allocate WC pages Applications can request multiple WC pages for the same ucontext. As of now, only 1 WC page per uconte...

PT-2026-72831

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference exists in the RDMA/mlx5 component. The function MLX5 IB METHOD DEVX SUBSCRIBE EVENT links event sub into sub list before initializing fields required by the shared err...

PT-2026-72732

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/mlx5 component where the software-provided UAR User Access Region index was being released instead of the index provided by the hardware. The fix ensures that...

PT-2026-72688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA bnxt re component where the SRQ toggle page is freed before the firmware teardown completes. This can lead to a situation where an NQ interrupt arriving durin...

PT-2026-72687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA bnxt re driver where a CQ toggle page is freed before the firmware teardown completes. This can lead to a situation where an NQ interrupt arriving during the...

Linux Distros Unpatched Vulnerability : CVE-2026-72494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitqueue along with an explicit requestdone flag, but without proper barrie...

PT-2026-72682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The RDMA/irdma driver contains an issue where a waitqueue and an explicit request done flag were used without proper memory barriers. Memory barriers are synchronization primitives that...

CVE-2026-74394: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check immbuf-len is a user-controlled uint32t received from the network. Adding it to immdataoffset without overflow checking allows a malicious initiator to send...

PT-2026-72814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU issue exists in the RDMA/rxe component. The function get srq wqe reads the num sge variable from a shared receive queue buffer mapped into userspace...

PT-2026-72813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the RDMA/rxe component, the responder reads Work Queue Element WQE fields directly from a shared queue buffer mapped into userspace for non-SRQ Queue Pairs QPs. This allows a maliciou...

PT-2026-72655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rpcrdma xprt connect function ignores the return value of frwr wp create. The frwr wp create function is responsible for creating a singleto...

Linux Distros Unpatched Vulnerability : CVE-2026-74389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/hns: Fix log flood after cmdmbox failure hnsrocecmdmbox is the command interface between driver and hardware. When hardware is abnormal, the unlimited erro...

CVE-2026-72491: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while rdmarequest accesses the same field under the reqlock spinlock. This...

PT-2026-72735

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR aging push to queue error flow Aging pools with pinned handles requires moving handles from the active queue to a non-empty inactive queue that might fail on new page allocation, we are currently not handling...

CVE-2026-74298: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR set pinned push error path Add destruction of FRMR handles in case the push to the pool fails. This prevents resources leak in case pool page allocation fails...

PT-2026-72825

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/hns component where the hns roce cmd mbox function, which serves as the command interface between the driver and hardware, can trigger unlimited error printin...