---
id: CVE-2026-74296
title: 'RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one

  Free the UAR index returned by the hardware.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 <
    80f1f49f53a42733e60c90e0ec545e647969214d
  - >-
    Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 <
    aabfc845838ef453f1d22d7665596f9cc48be7dd
  - >-
    Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 <
    6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee
  - >-
    Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 <
    d3ff718c0c7153e2641e6a09507bace14fc5c402
  - >-
    Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 <
    ef369446f62903ea079e8a7954b5bf8bb8300fe3
  - >-
    Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 <
    449ae7927152e46acbe5f19f97eafdae6d3a96b1
  - Linux 4.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T18:52:36.442847Z'
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:55:31.271Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-74296'
references:
  - url: 'https://git.kernel.org/stable/c/80f1f49f53a42733e60c90e0ec545e647969214d'
  - url: 'https://git.kernel.org/stable/c/aabfc845838ef453f1d22d7665596f9cc48be7dd'
  - url: 'https://git.kernel.org/stable/c/6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee'
  - url: 'https://git.kernel.org/stable/c/d3ff718c0c7153e2641e6a09507bace14fc5c402'
  - url: 'https://git.kernel.org/stable/c/ef369446f62903ea079e8a7954b5bf8bb8300fe3'
  - url: 'https://git.kernel.org/stable/c/449ae7927152e46acbe5f19f97eafdae6d3a96b1'
tags:
  - cve.org
epss: 0.00176
epssPercentile: 0.06635
ingestedAt: '2026-10-16T19:46:24.383Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one

Free the UAR index returned by the hardware.

## Affected

- `Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 < 80f1f49f53a42733e60c90e0ec545e647969214d`
- `Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 < aabfc845838ef453f1d22d7665596f9cc48be7dd`
- `Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 < 6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee`
- `Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 < d3ff718c0c7153e2641e6a09507bace14fc5c402`
- `Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 < ef369446f62903ea079e8a7954b5bf8bb8300fe3`
- `Linux >= 4ed131d0bb1597ce12fff22d9d7fc9720a6e8cf0 < 449ae7927152e46acbe5f19f97eafdae6d3a96b1`
- `Linux 4.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.