CVE-2026-74297

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74297
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74297.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74297
Downstream
Published
2026-08-15T05:58:01.414Z
Modified
2026-08-18T03:56:28.488093606Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
RDMA/mlx5: Fix undefined shift of user RQ WQE size
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix undefined shift of user RQ WQE size

setrqsize() computes the RQ WQE size as "1 << rqwqeshift" based on the user-provided rqwqeshift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shift of 31 also overflows a signed integer, leading to undefined behavior.

Use checkshloverflow() to compute the RQ WQE size and reject any invalid values.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74297.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c
Fixed
9fff54929cc00849d738faa99f06c32399aeb026
Fixed
b746f949c2ac2b041102836095d6d4a2ef21fa75
Fixed
c1dbf52d24a8cb1aa56780ba51b72e7d495f258c
Fixed
6fc874fdfb366bfb11c62e6af9a831c8be59ddda
Fixed
42f3d2c8c18b92ea33e506a38b64f1a8986c2823
Fixed
4b87a2497276a72fd63028e7419abf0fb7ed837b
Fixed
b732db02a2b04cde393638df19de6251ce62a74e
Fixed
d881d60223aac8fdc12b227d89c76e131e92a9cd

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74297.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.11.0
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74297.json"