CVE-2026-74297
High
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size set_rq_size() computes the RQ WQE size as "1 << rq_wqe_shift" based on the user-provided rq_wqe_shift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shift of 31 also overflows a signed integer, leading to undefined behavior. Use check_shl_overflow() to compute the RQ WQE size and reject any invalid values.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux9fff54929cc00849d738faa99f06c32399aeb026, b746f949c2ac2b041102836095d6d4a2ef21fa75, c1dbf52d24a8cb1aa56780ba51b72e7d495f258c, 6fc874fdfb366bfb11c62e6af9a831c8be59ddda, 42f3d2c8c18b92ea33e506a38b64f1a8986c2823, 4b87a2497276a72fd63028e7419abf0fb7ed837b, b732db02a2b04cde393638df19de6251ce62a74e, d881d60223aac8fdc12b227d89c76e131e92a9cd or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c ≤ v < 9fff54929cc00849d738faa99f06c32399aeb026, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c ≤ v < b746f949c2ac2b041102836095d6d4a2ef21fa75, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c ≤ v < c1dbf52d24a8cb1aa56780ba51b72e7d495f258c, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c ≤ v < 6fc874fdfb366bfb11c62e6af9a831c8be59ddda, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c ≤ v < 42f3d2c8c18b92ea33e506a38b64f1a8986c2823, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c ≤ v < 4b87a2497276a72fd63028e7419abf0fb7ed837b, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c ≤ v < b732db02a2b04cde393638df19de6251ce62a74e, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c ≤ v < d881d60223aac8fdc12b227d89c76e131e92a9cd, 3.11 | 9fff54929cc00849d738faa99f06c32399aeb026, b746f949c2ac2b041102836095d6d4a2ef21fa75, c1dbf52d24a8cb1aa56780ba51b72e7d495f258c, 6fc874fdfb366bfb11c62e6af9a831c8be59ddda, 42f3d2c8c18b92ea33e506a38b64f1a8986c2823, 4b87a2497276a72fd63028e7419abf0fb7ed837b, b732db02a2b04cde393638df19de6251ce62a74e, d881d60223aac8fdc12b227d89c76e131e92a9cd |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.