CVE-2026-89506RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR The original commit missed that three drivers (mthca, irdma, siw) have UHW data associated with reg_mr that cannot be passed through the ioctl. They also assume that the udata cannot be NULL, so failing to pass a valid udata can trigger a NULL udata crash in those drivers. This never happens in real systems since in rdma-core ibv_cmd_reg_mr_ex() does not accept a udata and those three drivers don't use it, however a malicious userspace could trigger it.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5b2e45049dc06a876bc6b138218ddeb0814502ef before 71d5c41ac583df09a7c32199bef7d42de7267d07; from 5b2e45049dc06a876bc6b138218ddeb0814502ef before 9e71d0f4944ba5641e01db29b3256c963656d671; from 5b2e45049dc06a876bc6b138218ddeb0814502ef before 011199f46f44a9fd93a9e5ab5d7fd1328d80e9bf | CNA record |
References
- https://git.kernel.org/stable/c/71d5c41ac583df09a7c32199bef7d42de7267d07
- https://git.kernel.org/stable/c/9e71d0f4944ba5641e01db29b3256c963656d671
- https://git.kernel.org/stable/c/011199f46f44a9fd93a9e5ab5d7fd1328d80e9bf
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.