CVE-2026-74397

HighCVSS 7.8/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier

mlx5_ib_alloc_transport_domain() allocates a transport domain and then may fail in mlx5_ib_enable_lb(). In that case, the allocated TD is leaked.

Fix this by deallocating the TD when mlx5_ib_enable_lb() returns an error. Also return 0 explicitly in the no-loopback-capability success branch, and move dev->lb.mutex initialization to mlx5_ib_stage_init_init().

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 146d2f1af3245a10b13eef263687e54f4e253d1d, < 6da717ed8a0703a331295fdd5ad8b7eacec216ad; >= 146d2f1af3245a10b13eef263687e54f4e253d1d, < 2c3b2667dad69d56774b79db763acb3a1bee0fc0; >= 146d2f1af3245a10b13eef263687e54f4e253d1d, < 37fc3cc0f924fd8d0f0cf87b92672dec75a32e57; >= 146d2f1af3245a10b13eef263687e54f4e253d1d, < 65e344925fa30abf50c8de8c150b397715fa2066; >= 146d2f1af3245a10b13eef263687e54f4e253d1d, < f88e12c95fc19f719e06ca1e9eb20fdad68ef61a; >= 146d2f1af3245a10b13eef263687e54f4e253d1d, < e79389115b9d27287ff6230a9750675106ed7668
LinuxLinux4.5

References

Timeline

Published
Aug 15, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-743989.8In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDADCVE-2026-74399In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buffer evm_read_xattrs() CVE-2026-74400In the Linux kernel, the following vulnerability has been resolved: bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries CVE-2026-744019.8In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send_queue ordered In a benchmark scenario CVE-2026-74402In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blCVE-2026-744037.8In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO SashiCVE-2026-744047.8In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one SashikoCVE-2026-744057.8In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between deCVE-2026-744069.8In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udCVE-2026-744078.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can cCVE-2026-744088.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID ath_tx_edCVE-2026-744098.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware mac_id in link lookup The ma
CVE-2026-74397: High severity, CVSS 7.8 | Vulnix