CVE Catalog

CVE-2026-72494

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

6th percentile - higher than 6% of all known CVEs

Summary

In the Linux kernel, in the RDMA/irdma driver, the waitqueue and request_done flag are replaced with a completion. The previous use of the flag without proper memory barriers could lead to concurrency issues. Using a completion solves this problem in a purpose-built way.

Risk Assessment

Lack of proper memory barriers around the request_done flag could lead to races and incorrect driver behavior, potentially causing system crashes.

Recommendation

Apply the Linux kernel update containing this fix to ensure proper synchronization in the irdma driver.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitqueue along with an explicit request_done flag, but without proper barriers around request_done. An earlier patch by Gui-Dong Han <[email protected]> attempted to fix this by adding the missing memory barriers. Rather than adding the barriers, this patch replaces the waitqueue+flag with a completion, which is designed for this exact purpose.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS