CVE-2026-68418

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the RDMA/irdma component where a user can trigger a null pointer dereference during Queue Pair (QP) creation. This occurs because the system only attempts to populate the iwqp->iwpbl field if the user-provided req.user wqe bufs field is non-zero, yet iwqp->iwpbl is later dereferenced unconditionally within the irdma setup virt qp() function. By providing a zero value for req.user wqe bufs, a user can bypass the null check and cause the system to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.