CVE-2026-43120
EUVD-2026-2765006.05.2026, 10:16
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix double free related to rereg_user_mr
If IB_MR_REREG_TRANS is set during rereg_user_mr, the
umem will be released and a new one will be allocated
in irdma_rereg_mr_trans. If any step of irdma_rereg_mr_trans
fails after the new umem is allocated, it releases the umem,
but does not set iwmr->region to NULL. The problem is that
this failure is propagated to the user, who will then call
ibv_dereg_mr (as they should). Then, the dereg_mr path will
see a non-NULL umem and attempt to call ib_umem_release again.
Fix this by setting iwmr->region to NULL after ib_umem_release.
Fixed: 5ac388db27c4 ("RDMA/irdma: Add support to re-register a memory region")EnginsightAffected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 6.6.120 ≤ 𝑥 < 6.6.136 |
| linux | linux_kernel | 6.7 ≤ 𝑥 < 6.12.83 |
| linux | linux_kernel | 6.13 ≤ 𝑥 < 6.18.24 |
| linux | linux_kernel | 6.19 ≤ 𝑥 < 6.19.14 |
| linux | linux_kernel | 7.0:rc1 |
| linux | linux_kernel | 7.0:rc2 |
| linux | linux_kernel | 7.0:rc3 |
| linux | linux_kernel | 7.0:rc4 |
| linux | linux_kernel | 7.0:rc5 |
𝑥
= Vulnerable software versions
Debian Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| cluster-md-kmp-default |
| ||||||||
| dlm-kmp-default |
| ||||||||
| gfs2-kmp-default |
| ||||||||
| kernel-64kb |
| ||||||||
| kernel-default |
| ||||||||
| kernel-default-base |
| ||||||||
| kernel-obs-build |
| ||||||||
| kernel-source |
| ||||||||
| kernel-zfcpdump |
| ||||||||
| ocfs2-kmp-default |
| ||||||||
| reiserfs-kmp-default |
|
Common Weakness Enumeration
Vulnerability Media Exposure
References