CVE-2026-68419
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitly registered with the normal reg_mr mechanism prior to creating the actual QP/CQ/SRQ object. These special registrations are indicated via an ABI field so the driver knows that they do not have a valid mkey and to skip the actual CQP command submission. Since these are real MR objects from the core's perspective, it is possible for a user application to invoke rereg_mr on them and cause a real CQP op to be emitted with the zero-initialized mkey value of 0. Fix this by preventing rereg_mr on these special regions.
How to fix
- Linux Linuxfb46d134e1b8690bed2da9005b36d32d2efd34ac, b5029e91c63406e4f4c8d58161048b41b6f0bd8c, ca1c29f05274b737dc964e28b97803750d7cf7ec, dbaa37e060918c45517786e37ecab0f300b48fa9, a846aecb931b4d65d5eafa92a0623545af46d4f2, 6.6.148 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 715fdb3b30541cc8180b7cdc6aa9f8c307afdf25 ≤ v < fb46d134e1b8690bed2da9005b36d32d2efd34ac, 5ac388db27c443dadfbb0b8b23fa7ccf429d901a ≤ v < b5029e91c63406e4f4c8d58161048b41b6f0bd8c, 5ac388db27c443dadfbb0b8b23fa7ccf429d901a ≤ v < ca1c29f05274b737dc964e28b97803750d7cf7ec, 5ac388db27c443dadfbb0b8b23fa7ccf429d901a ≤ v < dbaa37e060918c45517786e37ecab0f300b48fa9, 5ac388db27c443dadfbb0b8b23fa7ccf429d901a ≤ v < a846aecb931b4d65d5eafa92a0623545af46d4f2, 6.6.120 ≤ v < 6.6.148, 6.7 | fb46d134e1b8690bed2da9005b36d32d2efd34ac, b5029e91c63406e4f4c8d58161048b41b6f0bd8c, ca1c29f05274b737dc964e28b97803750d7cf7ec, dbaa37e060918c45517786e37ecab0f300b48fa9, a846aecb931b4d65d5eafa92a0623545af46d4f2, 6.6.148 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.