CVE-2026-72494

Source
https://cve.org/CVERecord?id=CVE-2026-72494
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72494.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72494
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (10)
UBUNTU (1)
Related
Published
2026-08-15T05:57:28Z
Modified
2026-10-28T02:30:38Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
RDMA/irdma: Replace waitqueue and flag with completion
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Replace waitqueue and flag with completion

The driver previously used a waitqueue along with an explicit request_done flag, but without proper barriers around request_done.

An earlier patch by Gui-Dong Han hanguidong02@gmail.com attempted to fix this by adding the missing memory barriers. Rather than adding the barriers, this patch replaces the waitqueue+flag with a completion, which is designed for this exact purpose.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72494.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
44d9e52977a1b90b0db1c7f8b197c218e9226520
Fixed
7d89bff21c12e543d12ad70cb0103cf815891b24
Fixed
8de303efe2ff4fcbf240dfc6eb3469e1e8f18a3f
Fixed
706591cccdd3ac2c0ddc8c2ed6c89a6be9865826
Fixed
bde37aed0724c0139dea177f3aae8d989b6babb1
Fixed
d9c8c45e6d2f438a3c8e643ae78b59454fa0fadd

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72494.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.14.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72494.json"