CVE-2026-72495

CVE-2026-72495

Critical · published August 15, 2026

CVSS v3.1
9.3
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Avoid repeated requests to allocate WC pages

Applications can request multiple WC pages for the same ucontext.

As of now, only 1 WC page per ucontext is supported. Add a lock to

avoid concurrent access and a check to fail repeated requests.

Also, if the mmap entry insert fails for the WC, free the Doorbell

page index mapped for the WC page.

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Published
2026-08-15T10:22Z
References (5)
https://git.kernel.org/stable/c/00c71846874fea4917961236e49287a1850dcf98 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/441baa79043431807115fd030d7d0bb14ed441a0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/478c4d24193fe3e6aa2accd4874ae43000e4a217 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8e59bd37d6d63a06ed452eaffe6c9d4ad903af7b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/da406b8b49c1dfe661a497483940d7ee781430db · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:57Z
    RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
    cvelistv5