7.8

CVE-2026-74297

RDMA/mlx5: Fix undefined shift of user RQ WQE size

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix undefined shift of user RQ WQE size

set_rq_size() computes the RQ WQE size as "1 << rq_wqe_shift" based on
the user-provided rq_wqe_shift, which is only checked to be greater than
32, so shifts of 32 are still accepted. A shift of 31 also overflows a
signed integer, leading to undefined behavior.

Use check_shl_overflow() to compute the RQ WQE size and reject any
invalid values.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Version < 9fff54929cc00849d738faa99f06c32399aeb026
Status affected
Version e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Version < b746f949c2ac2b041102836095d6d4a2ef21fa75
Status affected
Version e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Version < c1dbf52d24a8cb1aa56780ba51b72e7d495f258c
Status affected
Version e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Version < 6fc874fdfb366bfb11c62e6af9a831c8be59ddda
Status affected
Version e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Version < 42f3d2c8c18b92ea33e506a38b64f1a8986c2823
Status affected
Version e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Version < 4b87a2497276a72fd63028e7419abf0fb7ed837b
Status affected
Version e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Version < b732db02a2b04cde393638df19de6251ce62a74e
Status affected
Version e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Version < d881d60223aac8fdc12b227d89c76e131e92a9cd
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.11
Status affected
Version 0
Version < 3.11
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.03
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/9fff54929cc00849d738faa99f06c32399aeb026
https://git.kernel.org/stable/c/b746f949c2ac2b041102836095d6d4a2ef21fa75
https://git.kernel.org/stable/c/c1dbf52d24a8cb1aa56780ba51b72e7d495f258c
https://git.kernel.org/stable/c/6fc874fdfb366bfb11c62e6af9a831c8be59ddda
https://git.kernel.org/stable/c/42f3d2c8c18b92ea33e506a38b64f1a8986c2823
https://git.kernel.org/stable/c/4b87a2497276a72fd63028e7419abf0fb7ed837b
https://git.kernel.org/stable/c/b732db02a2b04cde393638df19de6251ce62a74e
https://git.kernel.org/stable/c/d881d60223aac8fdc12b227d89c76e131e92a9cd