{"id":"CVE-2026-68419","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-68419","summary":"RDMA/irdma: Prevent rereg_mr for non-mem regions","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Prevent rereg_mr for non-mem regions\n\nWhen a QP/CQ/SRQ is created, a two step process is used\nwhere the buffer is allocated in userspace and explicitly\nregistered with the normal reg_mr mechanism prior to creating\nthe actual QP/CQ/SRQ object.\n\nThese special registrations are indicated via an ABI field\nso the driver knows that they do not have a valid mkey and\nto skip the actual CQP command submission.\n\nSince these are real MR objects from the core's perspective,\nit is possible for a user application to invoke rereg_mr on them\nand cause a real CQP op to be emitted with the zero-initialized\nmkey value of 0.\n\nFix this by preventing rereg_mr on these special regions.","published":"2026-08-10T12:04:39.912Z","modified":"2026-08-14T04:04:01.849941409Z","cvss":{"score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"6.6.148"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/a846aecb931b4d65d5eafa92a0623545af46d4f2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b5029e91c63406e4f4c8d58161048b41b6f0bd8c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ca1c29f05274b737dc964e28b97803750d7cf7ec"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dbaa37e060918c45517786e37ecab0f300b48fa9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fb46d134e1b8690bed2da9005b36d32d2efd34ac"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68419.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68419"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-14T04:04:01.849941409Z"}}