https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 16:31:58 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74297 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>RDMA/mlx5: Fix undefined shift of user RQ WQE size</p> <p>set_rq_size() computes the RQ WQE size as &#34;1 &lt;&lt; rq_wqe_shift&#34; based on the user-provided rq_wqe_shift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shift of 31 also overflows a signed integer, leading to undefined behavior.</p> <p>Use check_shl_overflow() to compute the RQ WQE size and reject any invalid values.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>RDMA/mlx5: Fix undefined shift of user RQ WQE size</p> <p>set_rq_size() computes the RQ WQE size as &#34;1 &lt;&lt; rq_wqe_shift&#34; based on the user-provided rq_wqe_shift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shift of 31 also overflows a signed integer, leading to undefined behavior.</p> <p>Use check_shl_overflow() to compute the RQ WQE size and reject any invalid values.</p> https://vulnerability.circl.lu/vuln/cve-2026-74297