What is the CVSS score of EUVD-2026-59492?

EUVD-2026-59492 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux kernel are affected by EUVD-2026-59492?

The Linux RDMA/siw driver contains a critical kernel vulnerability (CVE-2026-74345, CVSS 9.8) allowing remote attackers to crash systems running iWARP networking.

How to fix or mitigate EUVD-2026-59492?

Within 24 hours, identify systems running the siw module with active iWARP listeners, focusing on production infrastructure. Within 7 days, either disable the siw module on systems where RDMA is not operationally required, or implement network-layer segmentation restricting RDMA connections to authenticated internal peers only. Within 30 days, establish a tracking mechanism for vendor kernel patches and schedule staged upgrades across test, staging, and production environments once a fixed kernel version is released.

Linux kernel EUVD-2026-59492

| CVE-2026-74345 CRITICAL

2026-08-15 Linux

GHSA-qccr-c782-7qrw

Information Disclosure Linux Red Hat

9.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.6 HIGH

Remote unauthenticated trigger over TCP when siw is present (AV:N/PR:N/AC:L); demonstrated impact is a kernel crash (A:H) with only theoretical, unproven memory disclosure/corruption (C:L/I:L).

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

4.0 AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Red Hat

7.0 HIGH

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 10:40 vuln.today

CVSS changed

Aug 17, 2026 - 06:22 NVD

9.8 (CRITICAL)

CVE Published

Aug 15, 2026 - 05:58 cve.org

CRITICAL 9.8

CVE Published

Aug 15, 2026 - 05:58 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: Fix endpoint/socket association handling

Disassociating a socket from an endpoint via siw_socket_disassoc() may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer after calling that function, but within.

This fixes a:

BUG: KASAN: slab-use-after-free in siw_cm_work_handler (drivers/infiniband/sw/siw/siw_cm.c:1053 drivers/infiniband/sw/siw/siw_cm.c:1075)

which occurred after processing a malformed MPA request during connection establishment, causing the new endpoint to be closed.

AnalysisAI

Kernel memory corruption in the Linux RDMA/siw (soft-iWARP) driver lets a remote peer trigger a slab use-after-free during connection setup: siw_socket_disassoc() can drop the last reference on an endpoint and free it, after which siw_cm_work_handler() still dereferences the stale endpoint pointer. The demonstrated impact is a KASAN-confirmed use-after-free crash after a malformed MPA request, exploitable only where the siw module is loaded and an iWARP listener is active. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Reach active siw iWARP listener

Delivery

Send malformed MPA request

Exploit

Endpoint driven into close/disassoc path

Execution

Last reference freed then dereferenced (use-after-free)

Impact

Kernel slab corruption and crash (DoS)

Access

Reach active siw iWARP listener

Delivery

Send malformed MPA request

Exploit

Endpoint driven into close/disassoc path

Execution

Last reference freed then dereferenced (use-after-free)

Impact

Kernel slab corruption and crash (DoS)

Vulnerability AssessmentAI

Exploitation	Requires the target to have the siw (software iWARP) kernel module loaded AND an iWARP/RDMA connection listener actively accepting connections that is network-reachable by the attacker; the trigger is a malformed MPA request sent during connection establishment, which drives the new endpoint into its close path. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Signals conflict sharply. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker able to reach a Linux host running the siw software-iWARP driver with an active connection listener opens a connection and sends a malformed MPA request during establishment; the resulting endpoint-close path frees the endpoint and the work handler then dereferences the freed object, triggering a slab use-after-free that crashes the kernel (DoS) and, in principle, could be shaped toward memory corruption. No public exploit code is identified at time of analysis; the KASAN report in the advisory confirms the fault is reliably reachable.
Remediation	Vendor-released patch: update to Linux 6.12.97, 6.18.40, 7.1.5, or 7.2-rc1 (or your distribution's backport of these), which relocate the socket-pointer clearing inside siw_socket_disassoc() so the endpoint is not touched after it is freed; the upstream stable commits are https://git.kernel.org/stable/c/b28d513393f81e2de00f82970487a9d001557e4e, https://git.kernel.org/stable/c/f6183983ce1ff254d629a333739082b39d7c5eb6, https://git.kernel.org/stable/c/b6cf763eee0a932792bef64ceaca568d324192fc, and https://git.kernel.org/stable/c/ea4f6f6c53577fb3f05dbd78b15e586772d49831. … Detailed patch versions, workarounds, and compensating controls in full report.