CVE-2026-68419

High

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitly registered with the normal reg_mr mechanism prior to creating the actual QP/CQ/SRQ object. These special registrations are indicated via an ABI field so the driver knows that they do not have a valid mkey and to skip the actual CQP command submission. Since these are real MR objects from the core's perspective, it is possible for a user application to invoke rereg_mr on them and cause a real CQP op to be emitted with the zero-initialized mkey value of 0. Fix this by preventing rereg_mr on these special regions.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedAug 10, 2026
First seenAug 10, 2026

How to fix

Update
  • Linux Linuxfb46d134e1b8690bed2da9005b36d32d2efd34ac, b5029e91c63406e4f4c8d58161048b41b6f0bd8c, ca1c29f05274b737dc964e28b97803750d7cf7ec, dbaa37e060918c45517786e37ecab0f300b48fa9, a846aecb931b4d65d5eafa92a0623545af46d4f2, 6.6.148 or later

Affected products

ProductAffected versionsFixed in
Linux Linux715fdb3b30541cc8180b7cdc6aa9f8c307afdf25 ≤ v < fb46d134e1b8690bed2da9005b36d32d2efd34ac, 5ac388db27c443dadfbb0b8b23fa7ccf429d901a ≤ v < b5029e91c63406e4f4c8d58161048b41b6f0bd8c, 5ac388db27c443dadfbb0b8b23fa7ccf429d901a ≤ v < ca1c29f05274b737dc964e28b97803750d7cf7ec, 5ac388db27c443dadfbb0b8b23fa7ccf429d901a ≤ v < dbaa37e060918c45517786e37ecab0f300b48fa9, 5ac388db27c443dadfbb0b8b23fa7ccf429d901a ≤ v < a846aecb931b4d65d5eafa92a0623545af46d4f2, 6.6.120 ≤ v < 6.6.148, 6.7fb46d134e1b8690bed2da9005b36d32d2efd34ac, b5029e91c63406e4f4c8d58161048b41b6f0bd8c, ca1c29f05274b737dc964e28b97803750d7cf7ec, dbaa37e060918c45517786e37ecab0f300b48fa9, a846aecb931b4d65d5eafa92a0623545af46d4f2, 6.6.148

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.