{"id":"CVE-2026-74296","revision":"c094e7c5cc474471a6b4e39a6aee2c7d","records":[{"revision":"c094e7c5cc474471a6b4e39a6aee2c7d","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-74296","aliases":[],"title":"RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Release the HW‑provided UAR index rather than the SW one\n\nFree the UAR index returned by the hardware.","state":0,"publishedAt":"2026-08-15T05:58:00.758+00:00","modifiedAt":"2026-10-16T18:55:31.271+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/infiniband/hw/mlx5/main.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0\",\n                            \"lessThan\": \"80f1f49f53a42733e60c90e0ec545e647969214d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0\",\n                            \"lessThan\": \"aabfc845838ef453f1d22d7665596f9cc48be7dd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0\",\n                            \"lessThan\": \"6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0\",\n                            \"lessThan\": \"d3ff718c0c7153e2641e6a09507bace14fc5c402\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0\",\n                            \"lessThan\": \"ef369446f62903ea079e8a7954b5bf8bb8300fe3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0\",\n                            \"lessThan\": \"449ae7927152e46acbe5f19f97eafdae6d3a96b1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/infiniband/hw/mlx5/main.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.16\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.16\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.145\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.97\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.40\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.5\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/80f1f49f53a42733e60c90e0ec545e647969214d","https://git.kernel.org/stable/c/aabfc845838ef453f1d22d7665596f9cc48be7dd","https://git.kernel.org/stable/c/6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee","https://git.kernel.org/stable/c/d3ff718c0c7153e2641e6a09507bace14fc5c402","https://git.kernel.org/stable/c/ef369446f62903ea079e8a7954b5bf8bb8300fe3","https://git.kernel.org/stable/c/449ae7927152e46acbe5f19f97eafdae6d3a96b1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74296","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-74296","identifiers":["CVE-2026-74296"]},"retained":false,"historicalAffected":[]}],"coverage":[]}