Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-68417

RDMA/siw: publish QP after initialization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently calls siw_qp_add() before the queues, CQ pointers, state, completion, and device list entry are ready. A QPN lookup can therefore reach a QP that is still being constructed. Move siw_qp_add() to the end of siw_create_qp(), after QP initialization and before adding the QP to the siw device list.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f29dd55b0236f7a26a4b9dd69186e3c04266797b to < 3c9d128219964dcea897bf6139b88242e987be8faffected
  • f29dd55b0236f7a26a4b9dd69186e3c04266797b to < 3ff82e3841ecab1ff38d5817c969a019d266c83caffected
  • f29dd55b0236f7a26a4b9dd69186e3c04266797b to < 36e91a58397ca8c978e38a0bf389f0c6113fa8caaffected
  • f29dd55b0236f7a26a4b9dd69186e3c04266797b to < 74912ad168f87d6b2b670a87987bb302d6e64aa1affected
  • f29dd55b0236f7a26a4b9dd69186e3c04266797b to < fcc9d50022bcdb1f9f7ed04955c72b4a7355af3daffected
  • f29dd55b0236f7a26a4b9dd69186e3c04266797b to < 52f9fcb191143448df55fd215ff09c5207fed43eaffected
  • f29dd55b0236f7a26a4b9dd69186e3c04266797b to < bb27fcc67c429d97f785c92c35a6c5adebb05d7faffected

Linux Linux

Default version status: affected

  • 5.3affected
  • 0 to < 5.3unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.148 to ≤ 6.6.*unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References