---
id: CVE-2026-23289
title: 'IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()

  Fix a user triggerable leak on the system call failure path.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ec34a922d243c3401a694450734e9effb2bafbfe <
    11ac61f4e9b7c48b0dd44661765e5ace3c441aa3
  - >-
    Linux >= ec34a922d243c3401a694450734e9effb2bafbfe <
    72fcfd4df46f2ee684c4776664d0cfc6c1746c9a
  - >-
    Linux >= ec34a922d243c3401a694450734e9effb2bafbfe <
    f67f1ad4029e9fa183141546de31987b254c9292
  - >-
    Linux >= ec34a922d243c3401a694450734e9effb2bafbfe <
    d0148965dbca8cc8efa7e3d6e99940487bf661c0
  - >-
    Linux >= ec34a922d243c3401a694450734e9effb2bafbfe <
    da8eaa73bc37d004350ba68eb18b6ade8e49db52
  - >-
    Linux >= ec34a922d243c3401a694450734e9effb2bafbfe <
    deee46b37ebd8cc5ff810127883fca90f2412a7b
  - >-
    Linux >= ec34a922d243c3401a694450734e9effb2bafbfe <
    972b72d7e2d8fe1400f1c7a8304c282c539b7e02
  - >-
    Linux >= ec34a922d243c3401a694450734e9effb2bafbfe <
    117942ca43e2e3c3d121faae530989931b7f67e1
  - Linux 2.6.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:25:12.335472Z'
published: '2026-03-25'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:35.622Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23289'
references:
  - url: 'https://git.kernel.org/stable/c/11ac61f4e9b7c48b0dd44661765e5ace3c441aa3'
  - url: 'https://git.kernel.org/stable/c/72fcfd4df46f2ee684c4776664d0cfc6c1746c9a'
  - url: 'https://git.kernel.org/stable/c/f67f1ad4029e9fa183141546de31987b254c9292'
  - url: 'https://git.kernel.org/stable/c/d0148965dbca8cc8efa7e3d6e99940487bf661c0'
  - url: 'https://git.kernel.org/stable/c/da8eaa73bc37d004350ba68eb18b6ade8e49db52'
  - url: 'https://git.kernel.org/stable/c/deee46b37ebd8cc5ff810127883fca90f2412a7b'
  - url: 'https://git.kernel.org/stable/c/972b72d7e2d8fe1400f1c7a8304c282c539b7e02'
  - url: 'https://git.kernel.org/stable/c/117942ca43e2e3c3d121faae530989931b7f67e1'
tags:
  - cve.org
epss: 0.00127
epssPercentile: 0.02418
ingestedAt: '2026-11-05T22:38:32.109Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()

Fix a user triggerable leak on the system call failure path.

## Affected

- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 11ac61f4e9b7c48b0dd44661765e5ace3c441aa3`
- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 72fcfd4df46f2ee684c4776664d0cfc6c1746c9a`
- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < f67f1ad4029e9fa183141546de31987b254c9292`
- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < d0148965dbca8cc8efa7e3d6e99940487bf661c0`
- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < da8eaa73bc37d004350ba68eb18b6ade8e49db52`
- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < deee46b37ebd8cc5ff810127883fca90f2412a7b`
- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 972b72d7e2d8fe1400f1c7a8304c282c539b7e02`
- `Linux >= ec34a922d243c3401a694450734e9effb2bafbfe < 117942ca43e2e3c3d121faae530989931b7f67e1`
- `Linux 2.6.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.