CVE-2026-90128vdpa/mlx5: fix wrong list iterated in add_direct_chain error path
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path In add_direct_chain(), newly allocated direct MR entries are added to the local list 'tmp', which is spliced into mr->head only on success. On the error path, the cleanup loop was incorrectly iterating over mr->head instead of tmp. Fix by iterating over 'tmp' in the err_alloc cleanup path.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 94abbccdf2916cb03f9626f2d36c6e9971490c12 before c93defccf5eb0a92bdafa43487be6ce0221a2477; from 94abbccdf2916cb03f9626f2d36c6e9971490c12 before ed3462365636df3bc63e34d7468f4faed3f70a4e; 94abbccdf2916cb03f9626f2d36c6e9971490c12 builds before 22d52af9e26a72bdfe2dcfb1419a091de4862cd9; from 94abbccdf2916cb03f9626f2d36c6e9971490c12 before eeac2ea4ad2654e3f160a9b608d05c9af31433a6; from 94abbccdf2916cb03f9626f2d36c6e9971490c12 before 637d867530daea61898e3346975978b7f67fc2ac; 94abbccdf2916cb03f9626f2d36c6e9971490c12 builds before 6ca752850de3b8162f030793cc15001aec85c4cf; from 94abbccdf2916cb03f9626f2d36c6e9971490c12 before c678d04ac9e5a64c2559c43bce273e845fbd09eb; 94abbccdf2916cb03f9626f2d36c6e9971490c12 builds before 23ae56d9e74c122f95cae71ae3b9fc259fb88446 | CNA record |
References
- https://git.kernel.org/stable/c/c93defccf5eb0a92bdafa43487be6ce0221a2477
- https://git.kernel.org/stable/c/ed3462365636df3bc63e34d7468f4faed3f70a4e
- https://git.kernel.org/stable/c/22d52af9e26a72bdfe2dcfb1419a091de4862cd9
- https://git.kernel.org/stable/c/eeac2ea4ad2654e3f160a9b608d05c9af31433a6
- https://git.kernel.org/stable/c/637d867530daea61898e3346975978b7f67fc2ac
- https://git.kernel.org/stable/c/6ca752850de3b8162f030793cc15001aec85c4cf
- https://git.kernel.org/stable/c/c678d04ac9e5a64c2559c43bce273e845fbd09eb
- https://git.kernel.org/stable/c/23ae56d9e74c122f95cae71ae3b9fc259fb88446
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.