CVE-2026-72494

CRITICAL
INFO Priority: 0.07 BB Relevance: 80/100
Published: 2026-08-15 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitqueue along with an explicit request_done flag, but without proper barriers around request_done. An earlier patch by Gui-Dong Han <hanguidong02@gmail.com> attempted to fix this by adding the missing memory barriers. Rather than adding the barriers, this patch replaces the waitqueue+flag with a completion, which is designed for this exact purpose.

Affected Software (7)

VendorProductVersion
Linux Linux 44d9e52977a1b90b0db1c7f8b197c218e9226520 < 4dcd5afcc3516b07f0a506c338a49bccfd24589b
Linux Linux 44d9e52977a1b90b0db1c7f8b197c218e9226520 < 7d89bff21c12e543d12ad70cb0103cf815891b24
Linux Linux 44d9e52977a1b90b0db1c7f8b197c218e9226520 < 8de303efe2ff4fcbf240dfc6eb3469e1e8f18a3f
Linux Linux 44d9e52977a1b90b0db1c7f8b197c218e9226520 < 706591cccdd3ac2c0ddc8c2ed6c89a6be9865826
Linux Linux 44d9e52977a1b90b0db1c7f8b197c218e9226520 < bde37aed0724c0139dea177f3aae8d989b6babb1
Linux Linux 44d9e52977a1b90b0db1c7f8b197c218e9226520 < d9c8c45e6d2f438a3c8e643ae78b59454fa0fadd
Linux Linux 5.14

Bug Bounty Relevance

80 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.67%
Raw Score 0.006710
Percentile 52.0%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00671
2026-10-29
0.00671

Intelligence Sources

mitre ref →
nvd ref →