DMA Desynchronization Vulnerability in Linux Kernel by Mellanox

CVE-2026-43466

What is CVE-2026-43466?

A vulnerability has been identified in the Linux kernel's handling of DMA FIFO, specifically concerning the Mellanox network driver. This flaw occurs during transmission error recovery, leading to a desynchronization between DMA FIFO producer and consumer states. Upon triggering a recovery, while the producer continues to write to prior memory locations, the consumer starts reading from the initial position, risking the unmapping of stale DMA addresses. This lack of synchronization can result in data integrity issues and instability in network operations, highlighting the need for vigilant updates and remediation to protect systems utilizing the Linux kernel.

References