Skip to main content
VulnerabilityPublished Updated

CVE-2026-80880: Linux kernel · IB/mlx5: Properly support implicit ODP rereg_mr

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in ee914ef54a7e707453ecb43eb30fb0a5c6dd0d69 : update Linux kernel when convenient.

Data as of 6 Nov 2026, 17:34 UTC

Severity
Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
CISA SSVC
Exploitation
No evidence of active exploitation and no public proof of concept
Automatable
Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact
Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-06.

Patch
Available – fixed in ee914ef54a7e707453ecb43eb30fb0a5c6dd0d69, ee7a8335069150c3f1893a697ab30bbeca00d796, eb7cb798e563b3f3b3baeb9cc6f7455764267e50 +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 4 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ ef3642c4f54d3493c92c71faf46139b2473bc532, < ee914ef54a7e707453ecb43eb30fb0a5c6dd0d69
Fixed in
  • ee914ef54a7e707453ecb43eb30fb0a5c6dd0d69
LinuxLinuxAffected
  • ≥ ef3642c4f54d3493c92c71faf46139b2473bc532, < ee7a8335069150c3f1893a697ab30bbeca00d796
Fixed in
  • ee7a8335069150c3f1893a697ab30bbeca00d796
LinuxLinuxAffected
  • ≥ ef3642c4f54d3493c92c71faf46139b2473bc532, < eb7cb798e563b3f3b3baeb9cc6f7455764267e50
Fixed in
  • eb7cb798e563b3f3b3baeb9cc6f7455764267e50
LinuxLinuxAffected
  • ≥ ef3642c4f54d3493c92c71faf46139b2473bc532, < d4f84bfa089fe71f775d25beb29303e844494c25
Fixed in
  • d4f84bfa089fe71f775d25beb29303e844494c25
LinuxLinuxAffected
  • ≥ ef3642c4f54d3493c92c71faf46139b2473bc532, < cbc9982c8573fb9e35040063aa78c8ebe768a1ff
Fixed in
  • cbc9982c8573fb9e35040063aa78c8ebe768a1ff
LinuxLinuxAffected
  • ≥ ef3642c4f54d3493c92c71faf46139b2473bc532, < 94f7e50eb6b2ce7fbd9aeac1db22460d2013a3fb
Fixed in
  • 94f7e50eb6b2ce7fbd9aeac1db22460d2013a3fb

AI-suggested

A fix is available and has been applied in the Linux kernel versions identified by the provided commit hashes. Users should update to a Linux kernel version that includes these fixes to remediate the vulnerability.

Description

A vulnerability in the Linux kernel's IB/mlx5 driver related to implicit On-Demand Paging (ODP) reregistration of memory regions (rereg_mr) has been fixed. The issue involved improper handling of child memory keys (mkeys) in implicit ODP configurations, which required rebuilding the entire parent mkey structure upon changes. Additionally, a race condition involving access to the memory region's protection domain (mr->pd) was addressed.

References

Community reviews

Loading reviews…