{"id":"CVE-2026-68419","summary":"RDMA/irdma: Prevent rereg_mr for non-mem regions","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Prevent rereg_mr for non-mem regions\n\nWhen a QP/CQ/SRQ is created, a two step process is used\nwhere the buffer is allocated in userspace and explicitly\nregistered with the normal reg_mr mechanism prior to creating\nthe actual QP/CQ/SRQ object.\n\nThese special registrations are indicated via an ABI field\nso the driver knows that they do not have a valid mkey and\nto skip the actual CQP command submission.\n\nSince these are real MR objects from the core's perspective,\nit is possible for a user application to invoke rereg_mr on them\nand cause a real CQP op to be emitted with the zero-initialized\nmkey value of 0.\n\nFix this by preventing rereg_mr on these special regions.","modified":"2026-08-18T03:31:18.458209891Z","published":"2026-08-10T12:04:39.912Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68419.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/a846aecb931b4d65d5eafa92a0623545af46d4f2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b5029e91c63406e4f4c8d58161048b41b6f0bd8c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ca1c29f05274b737dc964e28b97803750d7cf7ec"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dbaa37e060918c45517786e37ecab0f300b48fa9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fb46d134e1b8690bed2da9005b36d32d2efd34ac"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68419.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68419"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"715fdb3b30541cc8180b7cdc6aa9f8c307afdf25"},{"fixed":"fb46d134e1b8690bed2da9005b36d32d2efd34ac"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5ac388db27c443dadfbb0b8b23fa7ccf429d901a"},{"fixed":"b5029e91c63406e4f4c8d58161048b41b6f0bd8c"},{"fixed":"ca1c29f05274b737dc964e28b97803750d7cf7ec"},{"fixed":"dbaa37e060918c45517786e37ecab0f300b48fa9"},{"fixed":"a846aecb931b4d65d5eafa92a0623545af46d4f2"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.6.120"},{"fixed":"6.6.148"}]}],"versions":["v6.6.147","v6.6.146","v6.6.145","v6.6.144","v6.6.143","v6.6.142","v6.6.141","v6.6.140","v6.6.139","v6.6.138","v6.6.137","v6.6.136","v6.6.135","v6.6.134","v6.6.133","v6.6.132","v6.6.131","v6.6.130","v6.6.129","v6.6.128","v6.6.127","v6.6.126","v6.6.125","v6.6.124","v6.6.123","v6.6.122","v6.6.121","v6.6.120"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68419.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.148"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.101"},{"fixed":"6.18.42"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"7.1.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68419.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}