CVE-2026-68417 is a vulnerability in Linux Kernel
Published on August 10, 2026
RDMA/siw: publish QP after initialization
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: publish QP after initialization
siw_create_qp() currently calls siw_qp_add() before the queues, CQ
pointers, state, completion, and device list entry are ready. A QPN
lookup can therefore reach a QP that is still being constructed.
Move siw_qp_add() to the end of siw_create_qp(), after QP
initialization and before adding the QP to the siw device list.
Products Associated with CVE-2026-68417
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version f29dd55b0236f7a26a4b9dd69186e3c04266797b and below 36e91a58397ca8c978e38a0bf389f0c6113fa8ca is affected.
- Version f29dd55b0236f7a26a4b9dd69186e3c04266797b and below 74912ad168f87d6b2b670a87987bb302d6e64aa1 is affected.
- Version f29dd55b0236f7a26a4b9dd69186e3c04266797b and below fcc9d50022bcdb1f9f7ed04955c72b4a7355af3d is affected.
- Version f29dd55b0236f7a26a4b9dd69186e3c04266797b and below 52f9fcb191143448df55fd215ff09c5207fed43e is affected.
- Version f29dd55b0236f7a26a4b9dd69186e3c04266797b and below bb27fcc67c429d97f785c92c35a6c5adebb05d7f is affected.
- Version 5.3 is affected.
- Before 5.3 is unaffected.
- Version 6.6.148, <= 6.6.* is unaffected.
- Version 6.12.101, <= 6.12.* is unaffected.
- Version 6.18.42, <= 6.18.* is unaffected.
- Version 7.1.6, <= 7.1.* is unaffected.
- Version 7.2-rc4, <= * is unaffected.