CVE-2026-90416

A flaw was found in the Linux kernel's RDMA/mlx5 component. The get_param() function, used for debugging congestion parameters, incorrectly formats a 32-bit unsigned integer as a signed integer. This can lead to a stack out-of-bounds read when a large value is processed, potentially causing unexpected system behavior or information disclosure.

This vulnerability is evaluated as having Moderate impact because exploitation requires local system access and is restricted to hosts with Mellanox hardware operating the mlx5 RDMA subsystem. Exposure is further minimized on default Red Hat Enterprise Linux installations, where debugfs access is restricted to privileged accounts. As a result, any failure condition triggered by this boundary read is confined to local kernel instability rather than arbitrary remote exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.