CVE-2026-68419

A flaw was found in the Linux kernel's RDMA/irdma component. A local user could exploit this by attempting to re-register specific memory regions (Queue Pair, Completion Queue, or Shared Receive Queue objects) that are not intended for re-registration. This could lead to an invalid operation being performed with a zero-initialized memory key, potentially causing system instability.

This vulnerability is rated as Moderate severity because exploitation requires local access and is limited to systems equipped with Intel RDMA network hardware, resulting in local denial of service without compromising data confidentiality or system integrity. An authenticated local user can trigger this issue by invoking memory re-registration on internal RDMA queue buffers that lack valid memory keys. Deployments that do not utilize Intel RDMA adapters or do not load the irdma driver are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.