THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-74584 — In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing to userspace bnxt_re_alloc_ucontext() allocates uctx->shpg via __get_free_page(GFP_KERNEL). The buddy allocator does not zero pages without __GFP_ZERO, so the page

[NVD] CVE-2026-74584 — In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing to userspace bnxt_re_alloc_ucontext() allocates uctx->shpg via __get_free_page(GFP_KERNEL). The buddy allocator does not zero pages without __GFP_ZERO, so the page

mednvdPublished 2026-08-22

CVE-2026-74584 CVSS: None Published: 2026-08-22T15:16:21.230

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: zero shared page before exposing to userspace

bnxt_re_alloc_ucontext() allocates uctx->shpg via __get_free_page(GFP_KERNEL). The buddy allocator does not zero pages without __GFP_ZERO, so the page contains stale kernel data from whatever object most rec

Indicators of compromise

CVE-2026-74584cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-74584