CVE-2026-52908 Details
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible If IB_MR_REREG_ACCESS changes from RO to RW then the umem has to be re-evaluated to ensure it is properly pinned as RW. Since the umem is hidden inside each driver's mr struct add a ib_umem_check_rereg() function that each driver has to call before processing IB_MR_REREG_ACCESS. mlx4 has to retain its duplicate ib_access_writable check because it implements IB_MR_REREG_ACCESS | IB_MR_REREG_TRANS by changing both items in place sequentially while the MR is live, so it will continue to not support this combination.
A vulnerability exists in the Linux kernel's RDMA (Remote Direct Memory Access) subsystem, specifically related to the re-registration of memory regions (MRs). When the access level of a memory region is changed from read-only to read-write, the associated user memory (umem) must be re-evaluated to ensure it is correctly pinned as writable. This vulnerability arises because the umem is not directly visible in the driver's MR structure, leading to potential inconsistencies. The issue affects several drivers within the RDMA subsystem, including mlx4, mlx5, hns, and irdma.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/09dc18894148381d3bfc550083b1236043870dce | kernel.org | Patch |
| https://git.kernel.org/stable/c/2904e985a2917b5dac65df82733065e78a65fc9d | kernel.org | Patch |
| https://git.kernel.org/stable/c/50334a05a950840b39a1ce3d2a173b4183db9b3e | kernel.org | Patch |
| https://git.kernel.org/stable/c/badad6fad60def1b9805559dd81dbab3d97b82aa | kernel.org | Patch |
| https://git.kernel.org/stable/c/eba5df21eda0fe7418efbea2f799f8ea1b8ca94c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.2, < 6.6.143 >= 6.7, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 7.1 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 19, 2026 | New CVE Received | kernel.org |