CVE-2026-74296

RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one

Free the UAR index returned by the hardware.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before 80f1f49f53a42733e60c90e0ec545e647969214dAffected 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before aabfc845838ef453f1d22d7665596f9cc48be7ddAffected 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before 6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2eeAffected 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before d3ff718c0c7153e2641e6a09507bace14fc5c402Affected 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before ef369446f62903ea079e8a7954b5bf8bb8300fe3Affected 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before 449ae7927152e46acbe5f19f97eafdae6d3a96b1Affected
LinuxLinux	4.16Affected before 4.16Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before 80f1f49f53a42733e60c90e0ec545e647969214dAffected
4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before aabfc845838ef453f1d22d7665596f9cc48be7ddAffected
4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before 6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2eeAffected
4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before d3ff718c0c7153e2641e6a09507bace14fc5c402Affected
4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before ef369446f62903ea079e8a7954b5bf8bb8300fe3Affected
4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 to before 449ae7927152e46acbe5f19f97eafdae6d3a96b1Affected

LinuxLinux

4.16Affected
before 4.16Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.