SB20260815130 - Out-of-bounds read in Linux kernel hw irdma driver
Published: August 15, 2026
Security Bulletin ID
SB20260815130
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2026-74346)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to an out-of-bounds read in irdma_handle_q_mem during CQ memory registration when processing CQ page array data. A local user can trigger CQ MR registration with a crafted page layout to disclose sensitive information.
The issue affects GEN_2 hardware and later when the CQ resize feature is enabled.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/3159c6fac43dc24b34d31971884d98a7a1bf4c4b
- https://git.kernel.org/stable/c/4385ddd654d90245eeb83b3cb539670ab5c85ba4
- https://git.kernel.org/stable/c/54cab78df0375196aaec4e3109191653d21751df
- https://git.kernel.org/stable/c/a80b3b13786e9ab1c52b31a1f16c7d6708fa9220
- https://git.kernel.org/stable/c/ad360a31092a870633ec255b96f50181628b4de0
- https://git.kernel.org/stable/c/d566002de555b18cc395012c5c1cb8682fc6d2a9
- https://git.kernel.org/stable/c/d5aa82da8f65562da996d184686db9d0ea718b91