CVE-2026-68417EPSS p5.3%
CVE-2026-68417CVE-2026-68417
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: publish QP after initialization
siw_create_qp() currently calls siw_qp_add() before the queues, CQ
pointers, state, completion, and device list entry are ready. A QPN
lookup can therefore reach a QP that is still being constructed.
Move siw_qp_add() to the end of siw_create_qp(), after QP
initialization and before adding the QP to the siw device list.
Scoring
| EPSS | 0.16% probability of exploitation · percentile 5.3% · 2026-08-11T12:00:17Z |
| Last modified | 2026-08-10 |