CVE-2026-72494 RDMA/irdma: Replace waitqueue and flag with completion
A race condition in the Linux kernel's irdma RDMA driver due to missing memory barriers could lead to system instability or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72494?
CVE-2026-72494 is a critical vulnerability in Linux, published on 15 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Replace waitqueue and flag with completion
The driver previously used a waitqueue along with an explicit request_done flag, but without proper barriers around request_done.
An earlier patch by Gui-Dong Han <[email protected]> attempted to fix this by adding the missing memory barriers. Rather than adding the barriers, this patch replaces the waitqueue+flag with a completion, which is designed for this exact purpose.
Which versions are affected by CVE-2026-72494?
How do I fix CVE-2026-72494?
Apply the vendor's patch.
Is CVE-2026-72494 being exploited?
There is no known exploitation of CVE-2026-72494 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-72494, DEBIAN-CVE-2026-72494, GHSA-pw35-43jc-62v7, UBUNTU-CVE-2026-72494.