NONE · 0

CVE-2026-90128

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path In add_direct_chain(), newly allocated direct MR entries are add...

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path In add_direct_chain(), newly allocated direct MR entries are added to the local list 'tmp', which is spliced into mr->head only on success. On the error path, the cleanup loop was incorrectly iterating over mr->head instead of tmp. Fix by iterating over 'tmp' in the err_alloc cleanup path.

References

FAQ

What is CVE-2026-90128?

CVE-2026-90128 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path In add_direct_chain(), newly allocated direct MR entries are add...

How severe is CVE-2026-90128?

CVSS scoring is not yet available for CVE-2026-90128. Check NVD for updates.

Is there a patch for CVE-2026-90128?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.