CVE-2026-74334
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
RDMA/nldev: Fix locking when accessing mr->pd
In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Fix locking when accessing mr->pd Sashiko points out that, due to rereg_mr, the PD is actually variable and all the touches in nldev are racy. Use mr->device instead of mr->pd->device. Getting the PD restrack ID is more tricky. To avoid disturbing all the happy paths, add an rdma_restrack_sync() operation which is sort of like flush_workqueue() or synchronize_irq(): after it returns, all the old nldev touches to the mr are gone and everything sees the new PD. This makes it safe to reach into the PD pointer.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| da5c8507821573b8ed6e3f47e009f273493ffaf7 | affected | git | 845c6b355226195dad1f26b300c4830f57034e8b | Unavailable | None listed |
| da5c8507821573b8ed6e3f47e009f273493ffaf7 | affected | git | 7a0cbb5721a1da81e902d73b6049f85ca8f3fc0a | Unavailable | None listed |
| da5c8507821573b8ed6e3f47e009f273493ffaf7 | affected | git | 05e26f34597e9c38bb5b340d86b179b23673869f | Unavailable | None listed |
| da5c8507821573b8ed6e3f47e009f273493ffaf7 | affected | git | a07cba1296aaa81bf9b914486ca957aaff196247 | Unavailable | None listed |
| da5c8507821573b8ed6e3f47e009f273493ffaf7 | affected | git | 1a132ee4e655288d9a0937ea5109a0d038431ae9 | Unavailable | None listed |
| da5c8507821573b8ed6e3f47e009f273493ffaf7 | affected | git | 50d5c02ab8e62325548bd3a6e6b758a9dcd6e7c3 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.18 | Unavailable | None listed |
| 6.1.188 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.157 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.110 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.52 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.1.5 | unaffected | semver | Unavailable | 7.1.* | None listed |
| 7.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |