Riskcovery

CVE-2026-74345

RDMA/siw: Fix endpoint/socket association handling

State
Published
Severity
9.8 Critical
Published
Aug 15, 2026
Updated
Oct 30, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: Fix endpoint/socket association handling

Disassociating a socket from an endpoint via siw_socket_disassoc() may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer after calling that function, but within.

This fixes a:

BUG: KASAN: slab-use-after-free in siw_cm_work_handler (drivers/infiniband/sw/siw/siw_cm.c:1053 drivers/infiniband/sw/siw/siw_cm.c:1075)

which occurred after processing a malformed MPA request during connection establishment, causing the new endpoint to be closed.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6c52fdc244b5ccc468006fd65a504d4ee33743c7 to before f27da1192118fb6a7e73a85cfe4b02ccf8298619Affected
  • 6c52fdc244b5ccc468006fd65a504d4ee33743c7 to before ff584d3735b13a1d7f8cd072f98fea40b6062518Affected
  • 6c52fdc244b5ccc468006fd65a504d4ee33743c7 to before b28d513393f81e2de00f82970487a9d001557e4eAffected
  • 6c52fdc244b5ccc468006fd65a504d4ee33743c7 to before f6183983ce1ff254d629a333739082b39d7c5eb6Affected
  • 6c52fdc244b5ccc468006fd65a504d4ee33743c7 to before b6cf763eee0a932792bef64ceaca568d324192fcAffected
  • 6c52fdc244b5ccc468006fd65a504d4ee33743c7 to before ea4f6f6c53577fb3f05dbd78b15e586772d49831Affected
LinuxLinux
  • 5.3Affected
  • before 5.3Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.