CVE-2026-68419RDMA/irdma: Prevent rereg_mr for non-mem regions
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitly registered with the normal reg_mr mechanism prior to creating the actual QP/CQ/SRQ object. These special registrations are indicated via an ABI field so the driver knows that they do not have a valid mkey and to skip the actual CQP command submission. Since these are real MR objects from the core's perspective, it is possible for a user application to invoke rereg_mr on them and cause a real CQP op to be emitted with the zero-initialized mkey value of 0. Fix this by preventing rereg_mr on these special regions.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 715fdb3b30541cc8180b7cdc6aa9f8c307afdf25 before fb46d134e1b8690bed2da9005b36d32d2efd34ac; from 5ac388db27c443dadfbb0b8b23fa7ccf429d901a before b5029e91c63406e4f4c8d58161048b41b6f0bd8c; from 5ac388db27c443dadfbb0b8b23fa7ccf429d901a before ca1c29f05274b737dc964e28b97803750d7cf7ec; from 5ac388db27c443dadfbb0b8b23fa7ccf429d901a before dbaa37e060918c45517786e37ecab0f300b48fa9; from 5ac388db27c443dadfbb0b8b23fa7ccf429d901a before a846aecb931b4d65d5eafa92a0623545af46d4f2; from 6.6.120 before 6.6.148 | CNA record |
References
- https://git.kernel.org/stable/c/fb46d134e1b8690bed2da9005b36d32d2efd34ac
- https://git.kernel.org/stable/c/b5029e91c63406e4f4c8d58161048b41b6f0bd8c
- https://git.kernel.org/stable/c/ca1c29f05274b737dc964e28b97803750d7cf7ec
- https://git.kernel.org/stable/c/dbaa37e060918c45517786e37ecab0f300b48fa9
- https://git.kernel.org/stable/c/a846aecb931b4d65d5eafa92a0623545af46d4f2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.