Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-52908— RDMA: During rereg_mr ensure that REREG_ACCESS is compatible

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会开源的操作系统Linux所使用的内核。 Linux kernel 6.2版本存在安全漏洞，该漏洞源于RDMA重新注册MR时REREG_ACCESS兼容性问题，当访问权限从只读变为读写时，可能导致umem无法正确锁定为读写状态，允许攻击者在特定情况下进行未授权操作。

CVSS 7.8 · High EPSS 0.13% · P2

Affected Version Matrix 12

VendorProduct Version RangeStatus
Linux Linux b40656aa7d559adc1fe689396dc58b92a9a27286< 09dc18894148381d3bfc550083b1236043870dce affected
b40656aa7d559adc1fe689396dc58b92a9a27286< eba5df21eda0fe7418efbea2f799f8ea1b8ca94c affected
b40656aa7d559adc1fe689396dc58b92a9a27286< 2904e985a2917b5dac65df82733065e78a65fc9d affected
b40656aa7d559adc1fe689396dc58b92a9a27286< 50334a05a950840b39a1ce3d2a173b4183db9b3e affected
b40656aa7d559adc1fe689396dc58b92a9a27286< badad6fad60def1b9805559dd81dbab3d97b82aa affected
6.2 affected
< 6.2 unaffected
6.6.143≤ 6.6.* unaffected
… +4 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-52908

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible If IB_MR_REREG_ACCESS changes from RO to RW then the umem has to be re-evaluated to ensure it is properly pinned as RW. Since the umem is hidden inside each driver's mr struct add a ib_umem_check_rereg() function that each driver has to call before processing IB_MR_REREG_ACCESS. mlx4 has to retain its duplicate ib_access_writable check because it implements IB_MR_REREG_ACCESS | IB_MR_REREG_TRANS by changing both items in place sequentially while the MR is live, so it will continue to not support this combination.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的操作系统Linux所使用的内核。 Linux kernel 6.2版本存在安全漏洞，该漏洞源于RDMA重新注册MR时REREG_ACCESS兼容性问题，当访问权限从只读变为读写时，可能导致umem无法正确锁定为读写状态，允许攻击者在特定情况下进行未授权操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux b40656aa7d559adc1fe689396dc58b92a9a27286 ~ 09dc18894148381d3bfc550083b1236043870dce -
Linux Linux 6.2 -

II. Public POCs for CVE-2026-52908

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-52908

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-52908 (5)

Same Patch Batch · Linux · 2026-06-19 · 3 CVEs total

CVE-2026-52909 7.8 HIGH ip6_vti: set netns_immutable on the fallback device.
CVE-2026-52910 7.8 HIGH bpf: Free reuseport cBPF prog after RCU grace period.

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-52908

No comments yet

Leave a comment