CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Prevent reregmr for non-mem regions
When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitly registered with the normal regmr mechanism prior to creating the actual QP/CQ/SRQ object.
These special registrations are indicated via an ABI field so the driver knows that they do not have a valid mkey and to skip the actual CQP command submission.
Since these are real MR objects from the core's perspective, it is possible for a user application to invoke reregmr on them and cause a real CQP op to be emitted with the zero-initialized mkey value of 0.
Fix this by preventing reregmr on these special regions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68419?
CVE-2026-68419 has a risk rating of 38, indicating it's a moderate severity vulnerability.
How do I fix CVE-2026-68419?
To fix CVE-2026-68419, ensure you update to the latest version of the Linux kernel where this vulnerability has been patched.
What impact does CVE-2026-68419 have on my system?
CVE-2026-68419 could potentially allow unauthorized access or manipulation of registered memory regions in the RDMA infrastructure.
Is CVE-2026-68419 specific to certain Linux kernel versions?
Yes, CVE-2026-68419 affects specific versions of the Linux kernel that use the RDMA/irdma subsystem.
When was CVE-2026-68419 published?
CVE-2026-68419 was published on August 10, 2026.