PT-2026-72683

CVE-2026-72495

·

Published

2026-08-15

·

Updated

2026-10-08

Description by

CVSS 3.1
9.3
Critical
MetricsAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the RDMA/bnxt re component where applications can request multiple Work Completion (WC) pages for the same ucontext, although only one WC page per ucontext is supported. This can lead to concurrent access issues. Additionally, if the mmap entry insert fails for the WC, the Doorbell page index mapped for the WC page is not properly freed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-96081
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23477-1
SUSE-SU-2026:23481-1
SUSE-SU-2026:23528-1
SUSE-SU-2026:23529-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:4120-1
SUSE-SU-2026:4254-1
USN-8781-1
USN-8816-1
USN-8816-2
USN-8816-3
USN-8816-4
USN-8888-1
USN-8888-2
Found an issue in the description? Have something to add? Feel free to write us 👾