CVE-2026-72495

9.3 Critique

Publiée le 15/08/2026 à 08:22 · Modifiée le 21/10/2026 à 15:19 · Reçue · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Applications can request multiple WC pages for the same ucontext. As of now, only 1 WC page per ucontext is supported. Add a lock to avoid concurrent access and a check to fail repeated requests. Also, if the mmap entry insert fails for the WC, free the Doorbell page index mapped for the WC page.

Traduire en français

Produits concernés

Linux

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.3 Critique	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`

Références

https://git.kernel.org/stable/c/00c71846874fea4917961236e49287a1850dcf98
https://git.kernel.org/stable/c/441baa79043431807115fd030d7d0bb14ed441a0
https://git.kernel.org/stable/c/478c4d24193fe3e6aa2accd4874ae43000e4a217
https://git.kernel.org/stable/c/8e59bd37d6d63a06ed452eaffe6c9d4ad903af7b
https://git.kernel.org/stable/c/da406b8b49c1dfe661a497483940d7ee781430db

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories