CVE-2026-74296 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Free the UAR index returned by the hardware.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/449ae7927152e46acbe5f19f97eafdae6d3a96b1
https://git.kernel.org/stable/c/6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee
https://git.kernel.org/stable/c/80f1f49f53a42733e60c90e0ec545e647969214d
https://git.kernel.org/stable/c/aabfc845838ef453f1d22d7665596f9cc48be7dd
https://git.kernel.org/stable/c/d3ff718c0c7153e2641e6a09507bace14fc5c402
https://git.kernel.org/stable/c/ef369446f62903ea079e8a7954b5bf8bb8300fe3

History

Sat, 15 Aug 2026 06:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Free the UAR index returned by the hardware.
Title		RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/449ae7927152e46acbe5f19f97eafdae6d3a96b1 https://git.kernel.org/stable/c/6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee https://git.kernel.org/stable/c/80f1f49f53a42733e60c90e0ec545e647969214d https://git.kernel.org/stable/c/aabfc845838ef453f1d22d7665596f9cc48be7dd https://git.kernel.org/stable/c/d3ff718c0c7153e2641e6a09507bace14fc5c402 https://git.kernel.org/stable/c/ef369446f62903ea079e8a7954b5bf8bb8300fe3

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:58:00.758Z

Updated: 2026-08-15T05:58:00.758Z

Reserved: 2026-08-15T05:44:03.882Z

Link: CVE-2026-74296

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:29.203

Modified: 2026-08-15T06:22:29.203

Link: CVE-2026-74296

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74296", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.882Z", "datePublished": "2026-08-15T05:58:00.758Z", "dateUpdated": "2026-08-15T05:58:00.758Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:58:00.758Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Release the HW\u2011provided UAR index rather than the SW one\n\nFree the UAR index returned by the hardware."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/infiniband/hw/mlx5/main.c"], "versions": [{"version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "lessThan": "80f1f49f53a42733e60c90e0ec545e647969214d", "status": "affected", "versionType": "git"}, {"version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "lessThan": "aabfc845838ef453f1d22d7665596f9cc48be7dd", "status": "affected", "versionType": "git"}, {"version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "lessThan": "6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee", "status": "affected", "versionType": "git"}, {"version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "lessThan": "d3ff718c0c7153e2641e6a09507bace14fc5c402", "status": "affected", "versionType": "git"}, {"version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "lessThan": "ef369446f62903ea079e8a7954b5bf8bb8300fe3", "status": "affected", "versionType": "git"}, {"version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "lessThan": "449ae7927152e46acbe5f19f97eafdae6d3a96b1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/infiniband/hw/mlx5/main.c"], "versions": [{"version": "4.16", "status": "affected"}, {"version": "0", "lessThan": "4.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/80f1f49f53a42733e60c90e0ec545e647969214d"}, {"url": "https://git.kernel.org/stable/c/aabfc845838ef453f1d22d7665596f9cc48be7dd"}, {"url": "https://git.kernel.org/stable/c/6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee"}, {"url": "https://git.kernel.org/stable/c/d3ff718c0c7153e2641e6a09507bace14fc5c402"}, {"url": "https://git.kernel.org/stable/c/ef369446f62903ea079e8a7954b5bf8bb8300fe3"}, {"url": "https://git.kernel.org/stable/c/449ae7927152e46acbe5f19f97eafdae6d3a96b1"}], "title": "RDMA/mlx5: Release the HW\u2011provided UAR index rather than the SW one", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/infiniband/hw/mlx5/main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "80f1f49f53a42733e60c90e0ec545e647969214d", "status": "affected", "version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "versionType": "git"}, {"lessThan": "aabfc845838ef453f1d22d7665596f9cc48be7dd", "status": "affected", "version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "versionType": "git"}, {"lessThan": "6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee", "status": "affected", "version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "versionType": "git"}, {"lessThan": "d3ff718c0c7153e2641e6a09507bace14fc5c402", "status": "affected", "version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "versionType": "git"}, {"lessThan": "ef369446f62903ea079e8a7954b5bf8bb8300fe3", "status": "affected", "version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "versionType": "git"}, {"lessThan": "449ae7927152e46acbe5f19f97eafdae6d3a96b1", "status": "affected", "version": "4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/infiniband/hw/mlx5/main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.16"}, {"lessThan": "4.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Release the HW\u2011provided UAR index rather than the SW one\n\nFree the UAR index returned by the hardware."}], "id": "CVE-2026-74296", "lastModified": "2026-08-15T06:22:29.203", "metrics": {}, "published": "2026-08-15T06:22:29.203", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/449ae7927152e46acbe5f19f97eafdae6d3a96b1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/80f1f49f53a42733e60c90e0ec545e647969214d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aabfc845838ef453f1d22d7665596f9cc48be7dd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d3ff718c0c7153e2641e6a09507bace14fc5c402"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ef369446f62903ea079e8a7954b5bf8bb8300fe3"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}