CVE-2026-72494

RDMA/irdma: Replace waitqueue and flag with completion

State: Published
Severity: 9.8 Critical
Published: Aug 15, 2026
Updated: Oct 30, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Replace waitqueue and flag with completion

The driver previously used a waitqueue along with an explicit request_done flag, but without proper barriers around request_done.

An earlier patch by Gui-Dong Han <hanguidong02@gmail.com> attempted to fix this by adding the missing memory barriers. Rather than adding the barriers, this patch replaces the waitqueue+flag with a completion, which is designed for this exact purpose.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	44d9e52977a1b90b0db1c7f8b197c218e9226520 to before 4dcd5afcc3516b07f0a506c338a49bccfd24589bAffected 44d9e52977a1b90b0db1c7f8b197c218e9226520 to before 7d89bff21c12e543d12ad70cb0103cf815891b24Affected 44d9e52977a1b90b0db1c7f8b197c218e9226520 to before 8de303efe2ff4fcbf240dfc6eb3469e1e8f18a3fAffected 44d9e52977a1b90b0db1c7f8b197c218e9226520 to before 706591cccdd3ac2c0ddc8c2ed6c89a6be9865826Affected 44d9e52977a1b90b0db1c7f8b197c218e9226520 to before bde37aed0724c0139dea177f3aae8d989b6babb1Affected 44d9e52977a1b90b0db1c7f8b197c218e9226520 to before d9c8c45e6d2f438a3c8e643ae78b59454fa0faddAffected
LinuxLinux	5.14Affected before 5.14Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

44d9e52977a1b90b0db1c7f8b197c218e9226520 to before 4dcd5afcc3516b07f0a506c338a49bccfd24589bAffected
44d9e52977a1b90b0db1c7f8b197c218e9226520 to before 7d89bff21c12e543d12ad70cb0103cf815891b24Affected
44d9e52977a1b90b0db1c7f8b197c218e9226520 to before 8de303efe2ff4fcbf240dfc6eb3469e1e8f18a3fAffected
44d9e52977a1b90b0db1c7f8b197c218e9226520 to before 706591cccdd3ac2c0ddc8c2ed6c89a6be9865826Affected
44d9e52977a1b90b0db1c7f8b197c218e9226520 to before bde37aed0724c0139dea177f3aae8d989b6babb1Affected
44d9e52977a1b90b0db1c7f8b197c218e9226520 to before d9c8c45e6d2f438a3c8e643ae78b59454fa0faddAffected

LinuxLinux

5.14Affected
before 5.14Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.