PT-2026-72832

CVE-2026-74396

·

Published

2026-08-15

·

Updated

2026-10-16

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the RDMA mlx5 component where the mlx5r umr update xlt() function allocates and DMA maps an XLT buffer using mlx5r umr create xlt(). When mlx5 odp populate xlt() fails, the error path returns directly, skipping the necessary cleanup performed by mlx5r umr unmap free xlt(). This results in a leak of the XLT DMA mapping and buffer. Additionally, if the emergency XLT page is utilized, the xlt emergency page mutex remains locked.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
Found an issue in the description? Have something to add? Feel free to write us 👾