by Kastro
Paper/Archive/CVE-2026-72495

CVE-2026-72495

Linux Linux — RDMA/bnxt_re: Avoid repeated requests to allocate WC pages

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
30
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 9.3.093 × 201.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Applications can request multiple WC pages for the same ucontext. As of now, only 1 WC page per ucontext is supported. Add a lock to avoid concurrent access and a check to fail repeated requests. Also, if the mmap entry insert fails for the WC, free the Doorbell page index mapped for the WC page.

Affected

ProductAffectedFixed inSource
Linux360da60d6c6edb9740de7a8e6d8969d62ceff956 – < 8e59bd37d6d63a06ed452eaffe6c9d4ad903af7b8e59bd37d6d63a06ed452eaffe6c9d4ad903af7bCNA
Linux360da60d6c6edb9740de7a8e6d8969d62ceff956 – < 00c71846874fea4917961236e49287a1850dcf9800c71846874fea4917961236e49287a1850dcf98CNA
Linux360da60d6c6edb9740de7a8e6d8969d62ceff956 – < 478c4d24193fe3e6aa2accd4874ae43000e4a217478c4d24193fe3e6aa2accd4874ae43000e4a217CNA
Linux360da60d6c6edb9740de7a8e6d8969d62ceff956 – < da406b8b49c1dfe661a497483940d7ee781430dbda406b8b49c1dfe661a497483940d7ee781430dbCNA
Linux360da60d6c6edb9740de7a8e6d8969d62ceff956 – < 441baa79043431807115fd030d7d0bb14ed441a0441baa79043431807115fd030d7d0bb14ed441a0CNA
Linux6.56.6.160CNA

Scores by source

Linux (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgit.kernel.org/stable/c/8e59bd37d6d63a06ed452eaffe6c9d4ad903af7brefgit.kernel.org/stable/c/00c71846874fea4917961236e49287a1850dcf98refgit.kernel.org/stable/c/478c4d24193fe3e6aa2accd4874ae43000e4a217refgit.kernel.org/stable/c/da406b8b49c1dfe661a497483940d7ee781430dbrefgit.kernel.org/stable/c/441baa79043431807115fd030d7d0bb14ed441a0