ShellCodeX
Tools • Events • News • Insights
ShellCodeX vulnerability brief
UNASSESSED Received

CVE-2026-68419

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitly registered with the normal reg_mr mechanism prior to creating the actual QP/CQ/SRQ object. These special registrations are indicated via an ABI field so the driver knows that they do not have a valid mkey and to skip the actual CQP command submission. Since these are real MR objects from the core's perspective, it is possible for a user application to invoke rereg_mr on them and cause a real CQP op to be emitted with the zero-initialized mkey value of 0. Fix this by preventing rereg_mr on these special regions.

Published 10 Aug 2026, 13:20 UTC Last modified 10 Aug 2026, 13:20 UTC
01

Attack profile

The conditions required to exploit this vulnerability and its potential impact.

Attack vector Not assessed
Attack complexity Not assessed
Privileges required Not assessed
User interaction Not assessed
Scope Not assessed
Confidentiality Not assessed
Integrity Not assessed
Availability Not assessed
02

Affected products

Product applicability statements supplied with the NVD record.

NVD has not published structured affected-product data for this record.
03

Weakness classification

CWE categories help security teams group the underlying software weakness.

Weakness classification is still awaiting analysis.
04

Source references

External advisories, patches and technical reports attached to this CVE record.