CVE-2026-74299
Last modified
CVE-2026-74299 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR aging push to queue error flow Aging pools with pinned handles requires moving handles from the active queue to a non-empty inactive queue that might fail on new page allocation, we are currently not handling the fault and leaking any mkey that fails the push. Fix by Introducing push_queue_to_queue_locked() that fills the destination's partial tail page from the source and then splices the remaining source pages onto the destination, performing no allocation. Replace the per-handle move loop in age_pinned_pool() and the open-coded splice in pool_aging_work() with calls to the helper. As the helper cannot fail under memory pressure, removing a class of GFP_ATOMIC allocations under the pool lock and simplifying the error flow.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR aging push to queue error flow Aging pools with pinned handles requires moving handles from the active queue to a non-empty inactive queue that might fail on new page allocation, we are currently not handling the fault and leaking any mkey that fails the push. Fix by Introducing push_queue_to_queue_locked() that fills the destination's partial tail page from the source and then splices the remaining source pages onto the destination, performing no allocation. Replace the per-handle move loop in age_pinned_pool() and the open-coded splice in pool_aging_work() with calls to the helper. As the helper cannot fail under memory pressure, removing a class of GFP_ATOMIC allocations under the pool lock and simplifying the error flow.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 020d189d16a62ed56115cce7e255459cf0eeb4e6, < edf133d28fc43f7f8b0da43a8d5b93fdf8073d35; >= 020d189d16a62ed56115cce7e255459cf0eeb4e6, < c6936506ed556ce3ccad36ab999baf2764dd7d25 |
| Linux | Linux | 7.1 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-74299?
How severe is CVE-2026-74299?
How do I fix CVE-2026-74299?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-74293In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74294In the Linux kernel, the following vulnerability has been re…7.3
- CVE-2026-74295In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-74296In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74297In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74298In the Linux kernel, the following vulnerability has been re…
- CVE-2026-7430The Post Snippets plugin for WordPress is vulnerable to Stor…4.4
- CVE-2026-74300In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-74301In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74302In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74303In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74304In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-74299?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
