CVE-2026-72495

Source
https://cve.org/CVERecord?id=CVE-2026-72495
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-72495.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-72495
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (10)
UBUNTU (1)
Related
Published
2026-08-15T05:57:28Z
Modified
2026-10-24T02:34:07Z
Severity
  • 9.3 (Critical) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Avoid repeated requests to allocate WC pages

Applications can request multiple WC pages for the same ucontext. As of now, only 1 WC page per ucontext is supported. Add a lock to avoid concurrent access and a check to fail repeated requests. Also, if the mmap entry insert fails for the WC, free the Doorbell page index mapped for the WC page.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72495.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
360da60d6c6edb9740de7a8e6d8969d62ceff956
Fixed
8e59bd37d6d63a06ed452eaffe6c9d4ad903af7b
Fixed
00c71846874fea4917961236e49287a1850dcf98
Fixed
478c4d24193fe3e6aa2accd4874ae43000e4a217
Fixed
da406b8b49c1dfe661a497483940d7ee781430db
Fixed
441baa79043431807115fd030d7d0bb14ed441a0

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-72495.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-72495.json"