CVE-2026-43120

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-43120

Key Details

CVE	CVE-2026-43120
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel
Classified as	CWE-415 (Double Free)

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Fix double free related to rereg_user_mr

If IB_MR_REREG_TRANS is set during rereg_user_mr, the

umem will be released and a new one will be allocated

in irdma_rereg_mr_trans. If any step of irdma_rereg_mr_trans

fails after the new umem is allocated, it releases the umem,

but does not set iwmr->region to NULL. The problem is that

this failure is propagated to the user, who will then call

ibv_dereg_mr (as they should). Then, the dereg_mr path will

see a non-NULL umem and attempt to call ib_umem_release again.

Fix this by setting iwmr->region to NULL after ib_umem_release.

Fixed: 5ac388db27c4 ("RDMA/irdma: Add support to re-register a memory region") (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-43120
CVE	https://www.cve.org/CVERecord?id=CVE-2026-43120

Source

Reference

NVD

CVE