CVE-2026-72498

Received Received - Intake

RDMA Memory Region Kernel Pointer Exposure in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid displaying the kernel pointer While dumping the info on MR using the rdma tool, we dump the mr_hwq which is a kernel pointer. There is no need to expose this value for end user. So avoid it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72498

EUVD

EUVD-2026-59397

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the RDMA/bnxt_re driver exposing a kernel pointer when dumping memory region (MR) information using the rdma tool. The kernel pointer, mr_hwq, is unnecessary for end users and could potentially be exploited for information disclosure or other malicious purposes.

Detection Guidance

This vulnerability involves exposure of kernel pointers in RDMA/bnxt_re MR info dumps. To detect it, check if the rdma tool is dumping mr_hwq values during memory region operations. Run 'rdma mr show' and inspect output for kernel pointer displays.

Impact Analysis

This vulnerability may allow attackers to obtain kernel memory addresses, which can aid in bypassing security mechanisms like ASLR or facilitating further exploits. Users should update their Linux kernel to a patched version to mitigate this risk.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves exposure of a kernel pointer in debug output, which is a low-risk information disclosure issue rather than a data breach or privacy violation.

Mitigation Strategies

Update your Linux kernel to the patched version that resolves this issue. The vulnerability is resolved by avoiding kernel pointer exposure in rdma tool output. Check your distribution's security advisories for kernel updates addressing CVE-2026-72498.

Hi! I’m here to help you understand CVE-2026-72498. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70