{"id":"CVE-2026-23289","title":"IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nIB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()\n\nFix a user triggerable leak on the system call failure path.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 11ac61f4e9b7c48b0dd44661765e5ace3c441aa3","Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 72fcfd4df46f2ee684c4776664d0cfc6c1746c9a","Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < f67f1ad4029e9fa183141546de31987b254c9292","Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < d0148965dbca8cc8efa7e3d6e99940487bf661c0","Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < da8eaa73bc37d004350ba68eb18b6ade8e49db52","Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < deee46b37ebd8cc5ff810127883fca90f2412a7b","Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 972b72d7e2d8fe1400f1c7a8304c282c539b7e02","Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 117942ca43e2e3c3d121faae530989931b7f67e1","Linux 2.6.14"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:25:12.335472Z"},"published":"2026-03-25","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:33:35.622Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23289","references":[{"url":"https://git.kernel.org/stable/c/11ac61f4e9b7c48b0dd44661765e5ace3c441aa3"},{"url":"https://git.kernel.org/stable/c/72fcfd4df46f2ee684c4776664d0cfc6c1746c9a"},{"url":"https://git.kernel.org/stable/c/f67f1ad4029e9fa183141546de31987b254c9292"},{"url":"https://git.kernel.org/stable/c/d0148965dbca8cc8efa7e3d6e99940487bf661c0"},{"url":"https://git.kernel.org/stable/c/da8eaa73bc37d004350ba68eb18b6ade8e49db52"},{"url":"https://git.kernel.org/stable/c/deee46b37ebd8cc5ff810127883fca90f2412a7b"},{"url":"https://git.kernel.org/stable/c/972b72d7e2d8fe1400f1c7a8304c282c539b7e02"},{"url":"https://git.kernel.org/stable/c/117942ca43e2e3c3d121faae530989931b7f67e1"}],"tags":["cve.org"],"epss":0.00127,"epssPercentile":0.02418,"ingestedAt":"2026-11-05T22:38:32.109Z","slug":"CVE-2026-23289","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nIB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()\n\nFix a user triggerable leak on the system call failure path.\n\n## Affected\n\n- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 11ac61f4e9b7c48b0dd44661765e5ace3c441aa3`\n- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 72fcfd4df46f2ee684c4776664d0cfc6c1746c9a`\n- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < f67f1ad4029e9fa183141546de31987b254c9292`\n- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < d0148965dbca8cc8efa7e3d6e99940487bf661c0`\n- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < da8eaa73bc37d004350ba68eb18b6ade8e49db52`\n- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < deee46b37ebd8cc5ff810127883fca90f2412a7b`\n- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 972b72d7e2d8fe1400f1c7a8304c282c539b7e02`\n- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 117942ca43e2e3c3d121faae530989931b7f67e1`\n- `Linux 2.6.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}