CVE-2026-68418

A flaw was found in the RDMA/irdma component of the Linux kernel. A local user could exploit this vulnerability by providing a zero value for user_wqe_bufs during the creation of a Queue Pair (QP). This action leads to a null pointer dereference, which can cause the system to crash, resulting in a Denial of Service (DoS).

This issue affects systems using the Intel RDMA (irdma) driver. A local user creating a queue pair with user_wqe_bufs set to zero can trigger a NULL pointer dereference because iwpbl is not allocated but is later dereferenced unconditionally. Systems without irdma/RDMA userspace access are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the irdma module from loading. See https://access.redhat.com/solutions/41278 for instructions.