CVE-2026-74390

A flaw was found in the Linux kernel's RDMA (Remote Direct Memory Access) irdma driver. This vulnerability occurs due to an error in how the irdma_copy_user_pgaddrs function handles memory allocation, specifically when a certain counter is zero. This can lead to an out-of-bounds write, where data is written beyond its intended memory location. Such an issue could result in memory corruption, potentially causing the system to become unstable or unavailable, leading to a denial of service.

This vulnerability is rated as having a Moderate impact because exploitation is constrained to environments with specialized Intel RDMA hardware and requires local access to interact with the device interfaces. On standard Red Hat Enterprise Linux installations, the affected driver is only loaded when corresponding physical adapters are present. While a local authenticated user could leverage this flaw to trigger memory corruption, the prerequisites and non-default hardware requirement significantly limit broad exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.