HOMEVULNERABILITIESCVE-2026-43120
HIGH

CVE-2026-43120

Published: May 6, 2026· Updated: May 12, 2026

7.8
CVSS v3.1
EPSS:0.02%probability of exploitation in 30 daysPercentile:4.8th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Fix double free related to rereg_user_mr

If IB_MR_REREG_TRANS is set during rereg_user_mr, the

umem will be released and a new one will be allocated

in irdma_rereg_mr_trans. If any step of irdma_rereg_mr_trans

fails after the new umem is allocated, it releases the umem,

but does not set iwmr->region to NULL. The problem is that

this failure is propagated to the user, who will then call

ibv_dereg_mr (as they should). Then, the dereg_mr path will

see a non-NULL umem and attempt to call ib_umem_release again.

Fix this by setting iwmr->region to NULL after ib_umem_release.

Fixed: 5ac388db27c4 ("RDMA/irdma: Add support to re-register a memory region")

NVD Source

Technical Analysis

CVE-2026-43120 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges Req.Low
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

Linux1 product
linux kernel
Source: NVD CPE · 2 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://git.kernel.org/stable/c/0c5d70bcb9d2275a1c8515a924016fcfeb4ab441
PATCHhttps://git.kernel.org/stable/c/0f22c32141acdcda266b26cab2b830baf870f3e0
PATCHhttps://git.kernel.org/stable/c/29a3edd7004bb635d299fb9bc6f0ea4ef13ed5a2
PATCHhttps://git.kernel.org/stable/c/62298a48f8b8788ad8b8464e6ffdf1ddebd2217e
PATCHhttps://git.kernel.org/stable/c/66964118f1f50ed85001c8fc9f7ab5bbdd021ee0

All References (5)

→
https://git.kernel.org/stable/c/0c5d70bcb9d2275a1c8515a924016fcfeb4ab441Patch
→
https://git.kernel.org/stable/c/0f22c32141acdcda266b26cab2b830baf870f3e0Patch
→
https://git.kernel.org/stable/c/29a3edd7004bb635d299fb9bc6f0ea4ef13ed5a2Patch
→
https://git.kernel.org/stable/c/62298a48f8b8788ad8b8464e6ffdf1ddebd2217ePatch
→
https://git.kernel.org/stable/c/66964118f1f50ed85001c8fc9f7ab5bbdd021ee0Patch

Quick Facts

CVE IDCVE-2026-43120
CVSS Score7.8 / 10
SeverityHIGH
CISA KEVNo
EPSS (30d)0.02%
Affected1 vendor
PublishedMay 6, 2026

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2026-43120 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2026-43120·NVD