CVE-2026-90128

vdpa/mlx5: fix wrong list iterated in add_direct_chain error path

N/A
Published: September 17, 2026 at 04:06 PM UTC
Updated: October 19, 2026 at 09:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path In add_direct_chain(), newly allocated direct MR entries are added to the local list 'tmp', which is spliced into mr->head only on success. On the error path, the cleanup loop was incorrectly iterating over mr->head instead of tmp. Fix by iterating over 'tmp' in the err_alloc cleanup path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.994abbccdf2916cb03f9626f2d36c6e9971490c12
Vendor states this is fixed in 22d52af9e26a72bdfe2dcfb1419a091de4862cd9 (fixed)
Vendor states this is fixed in 23ae56d9e74c122f95cae71ae3b9fc259fb88446 (fixed)
Vendor states this is fixed in 637d867530daea61898e3346975978b7f67fc2ac (fixed)
Vendor states this is fixed in 6ca752850de3b8162f030793cc15001aec85c4cf (fixed)
Vendor states this is fixed in c678d04ac9e5a64c2559c43bce273e845fbd09eb (fixed)
Vendor states this is fixed in c93defccf5eb0a92bdafa43487be6ce0221a2477 (fixed)
Vendor states this is fixed in ed3462365636df3bc63e34d7468f4faed3f70a4e (fixed)
Vendor states this is fixed in eeac2ea4ad2654e3f160a9b608d05c9af31433a6 (fixed)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 5.9 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card