CVE-2026-72495

A flaw was found in the Linux kernel's RDMA/bnxt_re component. A local attacker could exploit this vulnerability by repeatedly requesting Work Completion (WC) pages for the same user context (ucontext), exceeding the supported limit of one page per context. This could lead to concurrent access issues and potentially result in a denial of service due to resource exhaustion.

A moderate-impact flaw was found in the Linux kernel's RDMA driver for Broadcom NetXtreme-E adapters (bnxt_re). A local user with access to the RDMA userspace verbs interface could repeatedly or concurrently request Work Completion (WC) pages for the same user context (ucontext), even though only a single WC page per ucontext is supported. This could cause inconsistent resource accounting and exhaustion of the driver's limited doorbell resources, resulting in a local denial of service. Red Hat rated this flaw Moderate (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), significantly lower than the CVE.org critical rating (9.3), because exploitation requires local access to the RDMA device interface and the impact is limited to availability of RDMA resources, with no effect on confidentiality or integrity. Affected products include Red Hat Enterprise Linux 9 (kernel and kernel-rt, from the rhel-9.4 stream onward), Red Hat Enterprise Linux 10, and Red Hat In-Vehicle OS 2; earlier Red Hat Enterprise Linux 6, 7, 8, and 9.2 streams do not contain the vulnerable code and are therefore not affected. The fix for the affected streams is currently deferred and will be addressed in a future update; the residual risk is a local denial of service limited to RDMA resources, which requires an attacker to already have local access to the RDMA device interface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.