CVE-2026-74395

A flaw was found in the RDMA/mlx5 component of the Linux kernel. During the devx subscribe-event unwind process, a null pointer dereference can occur if eventfd_ctx_fdget() fails. This issue arises because event_sub is linked into sub_list before its fields are properly initialized, leading to an attempt to dereference a null pointer. A local attacker could potentially exploit this to cause a denial of service (DoS) by crashing the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.