Vulnerability in the Linux Kernel Affecting RDMA/siw Functionality

CVE-2026-68417

What is CVE-2026-68417?

A vulnerability in the Linux kernel's RDMA/siw functionality allows a race condition during the initialization of Queue Pairs (QPs). The function siw_create_qp() improperly invokes siw_qp_add() before completing the initialization of critical components such as queues, completion queue pointers, and state management. This may lead to inconsistent behavior where a QPN lookup can mistakenly reference a QP still undergoing construction. It is essential to ensure that siw_qp_add() is invoked only after all initialization steps are satisfactorily completed to maintain system stability and security.

References