CVE-2026-74297

CVE-2026-74297CVE-2026-74297

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size set_rq_size() computes the RQ WQE size as "1 << rq_wqe_shift" based on the user-provided rq_wqe_shift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shift of 31 also overflows a signed integer, leading to undefined behavior. Use check_shl_overflow() to compute the RQ WQE size and reject any invalid values.

Scoring

Last modified2026-08-15
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.