---
id: CVE-2026-68417
title: 'RDMA/siw: publish QP after initialization'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/siw: publish QP after initialization

  siw_create_qp() currently calls siw_qp_add() before the queues, CQ
  pointers, state, completion, and device list entry are rea…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b <
    3c9d128219964dcea897bf6139b88242e987be8f
  - >-
    Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b <
    3ff82e3841ecab1ff38d5817c969a019d266c83c
  - >-
    Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b <
    36e91a58397ca8c978e38a0bf389f0c6113fa8ca
  - >-
    Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b <
    74912ad168f87d6b2b670a87987bb302d6e64aa1
  - >-
    Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b <
    fcc9d50022bcdb1f9f7ed04955c72b4a7355af3d
  - >-
    Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b <
    52f9fcb191143448df55fd215ff09c5207fed43e
  - >-
    Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b <
    bb27fcc67c429d97f785c92c35a6c5adebb05d7f
  - Linux 5.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:48:32.516478Z'
published: '2026-08-10'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:53:12.644Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68417'
references:
  - url: 'https://git.kernel.org/stable/c/3c9d128219964dcea897bf6139b88242e987be8f'
  - url: 'https://git.kernel.org/stable/c/3ff82e3841ecab1ff38d5817c969a019d266c83c'
  - url: 'https://git.kernel.org/stable/c/36e91a58397ca8c978e38a0bf389f0c6113fa8ca'
  - url: 'https://git.kernel.org/stable/c/74912ad168f87d6b2b670a87987bb302d6e64aa1'
  - url: 'https://git.kernel.org/stable/c/fcc9d50022bcdb1f9f7ed04955c72b4a7355af3d'
  - url: 'https://git.kernel.org/stable/c/52f9fcb191143448df55fd215ff09c5207fed43e'
  - url: 'https://git.kernel.org/stable/c/bb27fcc67c429d97f785c92c35a6c5adebb05d7f'
tags:
  - cve.org
epss: 0.0012
epssPercentile: 0.01715
ingestedAt: '2026-10-16T17:24:46.866Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: publish QP after initialization

siw_create_qp() currently calls siw_qp_add() before the queues, CQ
pointers, state, completion, and device list entry are ready. A QPN
lookup can therefore reach a QP that is still being constructed.

Move siw_qp_add() to the end of siw_create_qp(), after QP
initialization and before adding the QP to the siw device list.

## Affected

- `Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b < 3c9d128219964dcea897bf6139b88242e987be8f`
- `Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b < 3ff82e3841ecab1ff38d5817c969a019d266c83c`
- `Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b < 36e91a58397ca8c978e38a0bf389f0c6113fa8ca`
- `Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b < 74912ad168f87d6b2b670a87987bb302d6e64aa1`
- `Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b < fcc9d50022bcdb1f9f7ed04955c72b4a7355af3d`
- `Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b < 52f9fcb191143448df55fd215ff09c5207fed43e`
- `Linux >= f29dd55b0236f7a26a4b9dd69186e3c04266797b < bb27fcc67c429d97f785c92c35a6c5adebb05d7f`
- `Linux 5.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.