AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-74397

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's mlx5 driver, specifically in the allocation and management of transport domains, which can lead to resource leaks if an error occurs during the enabling of loopback capabilities. This flaw could potentially impact system stability and resource utilization, making it critical for organizations using Linux environments with mlx5 hardware to prioritize patching. System administrators and security teams should address this issue promptly to mitigate any risks associated with resource leaks and ensure optimal performance.

CVE
CVE-2026-74397
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5_ib_alloc_transport_domain() allocates a transport domain and then may fail in mlx5_ib_enable_lb(). In that case, the allocated TD is leaked. Fix this by deallocating the TD when mlx5_ib_enable_lb() returns an error. Also return 0 explicitly in the no-loopback-capability success branch, and move dev->lb.mutex initialization to mlx5_ib_stage_init_init().