CVE-2026-80880
highpriority · track · 0EPSS 0.002 · 5 %ileDEFRRUEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr Due to all the child mkeys in the implicit ODP configuration we cannot change anything in place for the parent mkey. Instead the whole thing needs to be rebuilt if any change is requested. If the user does not specify a translation then force the implicit values which will then fall through the logic into mlx5_ib_reg_user_mr() to allocate a completely new MR. Since implicit children were also touching the mr->pd, this removes another case where the access was racy.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (28)
Products and version ranges known to be affected.
- Red Hat OpenShift Container Platformall versionscert_bundDEcpe:/a:redhat:openshift:container_platform
advisories (5)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-3211Linux Kernel: Mehrere SchwachstellenDeutsch2026-09-06csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um Speicherfehler und Kernel-Abstürze beziehungsweise Denial-of-Service-Zustände auszulösen, Speicher außerhalb vorgesehener Grenzen auszulesen sowie in einzelnen Fällen weitere Sicherheitsauswirkungen zu verursachen.
- CERTFR-2026-AVI-1333Multiples vulnérabilités dans le noyau Linux d'UbuntuFrançais2026-10-16vendor · certfrFR
- CERTFR-2026-AVI-1335Multiples vulnérabilités dans le noyau Linux de SUSEFrançais2026-10-16vendor · certfrFR
- CERTFR-2026-AVI-1372Multiples vulnérabilités dans les produits SUSEFrançais2026-10-23vendor · certfrFR
- CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7) nvd
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/5d02b9a2efd11d28d2a8feac7769686b1b871d9c
- https://git.kernel.org/stable/c/94f7e50eb6b2ce7fbd9aeac1db22460d2013a3fb
- https://git.kernel.org/stable/c/cbc9982c8573fb9e35040063aa78c8ebe768a1ff
- https://git.kernel.org/stable/c/d4f84bfa089fe71f775d25beb29303e844494c25
- https://git.kernel.org/stable/c/eb7cb798e563b3f3b3baeb9cc6f7455764267e50
- https://git.kernel.org/stable/c/ee7a8335069150c3f1893a697ab30bbeca00d796
- https://git.kernel.org/stable/c/ee914ef54a7e707453ecb43eb30fb0a5c6dd0d69
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan