SB20260918260 - Missing Release of Resource after Effective Lifetime in Linux kernel hw cxgb4 driver
Published: September 18, 2026
Security Bulletin ID
SB20260918260
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Missing Release of Resource after Effective Lifetime (CVE-ID: CVE-2026-90415)
CWE-ID: CWE-772 - Missing Release of Resource after Effective Lifetime
CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper resource shutdown or release in the RDMA/cxgb4 write_tpt_entry() function when programming a TPT entry. A local user can trigger a failed TPT entry write to cause a denial of service.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/2f17ca7ab5269ac2504e1039c3921373dccd7712
- https://git.kernel.org/stable/c/5a21e5114cec4cd3f8a2843d4c46bc49634d6e96
- https://git.kernel.org/stable/c/5fe4731bfbd8d83c4a14b4af3a27329969ce8a99
- https://git.kernel.org/stable/c/8f6976d635d190e3d7af7103daaa581cf1ccc12e
- https://git.kernel.org/stable/c/9eeafcda1d6c11f0eec532243c4e96ec8c632bd7
- https://git.kernel.org/stable/c/a2e37d1ab773be3cd26b1c19593ca2dbcece9c57
- https://git.kernel.org/stable/c/a64e2beb450179a5d43034af8d5476a11eac1486
- https://git.kernel.org/stable/c/fdfb5cea4bf070cdb31d997efd87bb684df041fd