Critical severity · published Aug 15, 2026
CVE-2026-72494
RDMA/irdma: Replace waitqueue and flag with completion
9.8
CVSS
0.7%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Replace waitqueue and flag with completion
The driver previously used a waitqueue along with an explicit
request_done flag, but without proper barriers around request_done.
An earlier patch by Gui-Dong Han <hanguidong02@gmail.com> attempted
to fix this by adding the missing memory barriers. Rather than
adding the barriers, this patch replaces the waitqueue+flag with
a completion, which is designed for this exact purpose.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
44d9e52977a1b90b0db1c7f8b197c218e9226520 before 7d89bff21c12e543d12ad70cb0103cf815891b24; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before 8de303efe2ff4fcbf240dfc6eb3469e1e8f18a3f; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before 706591cccdd3ac2c0ddc8c2ed6c89a6be9865826; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before bde37aed0724c0139dea177f3aae8d989b6babb1; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before d9c8c45e6d2f438a3c8e643ae78b59454fa0fadd; 5.14 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-72494
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-72494
git.kernel.org
https://git.kernel.org/stable/c/706591cccdd3ac2c0ddc8c2ed6c89a6be9865826
git.kernel.org
https://git.kernel.org/stable/c/7d89bff21c12e543d12ad70cb0103cf815891b24
git.kernel.org
https://git.kernel.org/stable/c/8de303efe2ff4fcbf240dfc6eb3469e1e8f18a3f
git.kernel.org
https://git.kernel.org/stable/c/bde37aed0724c0139dea177f3aae8d989b6babb1
git.kernel.org
https://git.kernel.org/stable/c/d9c8c45e6d2f438a3c8e643ae78b59454fa0fadd
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
7.8
CVE-2025-38352
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()