CVE-2026-74346

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the RDMA/irdma component during Completion Queue (CQ) memory registration. The issue occurs because the cqmr->split field, which tracks the IRDMA FEATURE CQ RESIZE feature, is not set until after CQ memory registration. Consequently, the irdma handle q mem() function incorrectly populates cqmr->shadow for GEN 2 hardware and newer. This happens when the req->cq pages variable is equal to iwmr->page cnt, resulting in an out-of-bounds read by one element from the arr array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.