Към съдържанието
Търсене

CVE-2026-68418: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously, the user QP creation path would only attempt to populate iwqp->iwpbl if the user-provided req.user_wqe_bufs field was non-zero. The problem is that iwqp->iwpbl is unconditionally dereferenced later on in irdma_setup_virt_qp. While there was a check for iwqp->iwpbl != NULL, this check would only occur if req.user_wqe_bufs was non-zero. The end result is that a user could send a zero user_wqe_bufs value and trigger a null ptr deref. Fix this by unconditionally calling irdma_get_pbl and bailing if it fails, similar to the CQ and SRQ paths.

    Засегнати продукти

    • Linux Linux: b48c24c2d710cf34810c555dcef883a3d35a9c08 преди 4e75028c000e9560a7ff66a23d7cd872a967ab7e; b48c24c2d710cf34810c555dcef883a3d35a9c08 преди d52ff592abfcd56234f266aa245c489f70b1c554; b48c24c2d710cf34810c555dcef883a3d35a9c08 преди ad68e0b759f9569f0dfea84f035c91eadb979802; b48c24c2d710cf34810c555dcef883a3d35a9c08 преди ec675b4cdfd378d8c9dd8c93126c024f2469bd79; b48c24c2d710cf34810c555dcef883a3d35a9c08 преди 728211c815f6eef28dd3df2a5b6297483185aa20; b48c24c2d710cf34810c555dcef883a3d35a9c08 преди b9b0889071569d43623c260074e159cd8f26adb1
    • Linux Linux: 5.14; преди 5.14; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.114 до 6.12.*; 6.18.42 до 6.18.*; 7.1.6 до 7.1.*; от 7.2 нататък

    История

    • 10 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-68418: Linux | freedomonline.bg