9.8

CVE-2026-74345

RDMA/siw: Fix endpoint/socket association handling

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: Fix endpoint/socket association handling

Disassociating a socket from an endpoint via siw_socket_disassoc() may
release the last reference on that endpoint and free it. Therefore, don't
clear the endpoints socket pointer after calling that function, but
within.

This fixes a:

  BUG: KASAN: slab-use-after-free in siw_cm_work_handler (drivers/infiniband/sw/siw/siw_cm.c:1053 drivers/infiniband/sw/siw/siw_cm.c:1075)

which occurred after processing a malformed MPA request during connection
establishment, causing the new endpoint to be closed.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 6c52fdc244b5ccc468006fd65a504d4ee33743c7
Version < b28d513393f81e2de00f82970487a9d001557e4e
Status affected
Version 6c52fdc244b5ccc468006fd65a504d4ee33743c7
Version < f6183983ce1ff254d629a333739082b39d7c5eb6
Status affected
Version 6c52fdc244b5ccc468006fd65a504d4ee33743c7
Version < b6cf763eee0a932792bef64ceaca568d324192fc
Status affected
Version 6c52fdc244b5ccc468006fd65a504d4ee33743c7
Version < ea4f6f6c53577fb3f05dbd78b15e586772d49831
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.3
Status affected
Version 0
Version < 5.3
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.45% 0.374
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b28d513393f81e2de00f82970487a9d001557e4e
https://git.kernel.org/stable/c/f6183983ce1ff254d629a333739082b39d7c5eb6
https://git.kernel.org/stable/c/b6cf763eee0a932792bef64ceaca568d324192fc
https://git.kernel.org/stable/c/ea4f6f6c53577fb3f05dbd78b15e586772d49831