7.8

CVE-2026-68417

RDMA/siw: publish QP after initialization

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: publish QP after initialization

siw_create_qp() currently calls siw_qp_add() before the queues, CQ
pointers, state, completion, and device list entry are ready. A QPN
lookup can therefore reach a QP that is still being constructed.

Move siw_qp_add() to the end of siw_create_qp(), after QP
initialization and before adding the QP to the siw device list.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f29dd55b0236f7a26a4b9dd69186e3c04266797b
Version < 3c9d128219964dcea897bf6139b88242e987be8f
Status affected
Version f29dd55b0236f7a26a4b9dd69186e3c04266797b
Version < 3ff82e3841ecab1ff38d5817c969a019d266c83c
Status affected
Version f29dd55b0236f7a26a4b9dd69186e3c04266797b
Version < 36e91a58397ca8c978e38a0bf389f0c6113fa8ca
Status affected
Version f29dd55b0236f7a26a4b9dd69186e3c04266797b
Version < 74912ad168f87d6b2b670a87987bb302d6e64aa1
Status affected
Version f29dd55b0236f7a26a4b9dd69186e3c04266797b
Version < fcc9d50022bcdb1f9f7ed04955c72b4a7355af3d
Status affected
Version f29dd55b0236f7a26a4b9dd69186e3c04266797b
Version < 52f9fcb191143448df55fd215ff09c5207fed43e
Status affected
Version f29dd55b0236f7a26a4b9dd69186e3c04266797b
Version < bb27fcc67c429d97f785c92c35a6c5adebb05d7f
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.3
Status affected
Version 0
Version < 5.3
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.021
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/36e91a58397ca8c978e38a0bf389f0c6113fa8ca
https://git.kernel.org/stable/c/74912ad168f87d6b2b670a87987bb302d6e64aa1
https://git.kernel.org/stable/c/fcc9d50022bcdb1f9f7ed04955c72b4a7355af3d
https://git.kernel.org/stable/c/52f9fcb191143448df55fd215ff09c5207fed43e
https://git.kernel.org/stable/c/bb27fcc67c429d97f785c92c35a6c5adebb05d7f
https://git.kernel.org/stable/c/3c9d128219964dcea897bf6139b88242e987be8f
https://git.kernel.org/stable/c/3ff82e3841ecab1ff38d5817c969a019d266c83c