The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs The irdma_copy_user_pgaddrs function loops     through all of the umem DMA blocks to populate the PBLEs and will stop when either the last DMA block is     reached or palloc->total_cnt is reached. The issue is that the logic for checking palloc->total_cnt would     only work for non-zero values. When irdma_setup_pbles is called with lvl==0, it calls     irdma_copy_user_pgaddrs with palloc->total_cnt==0, which means the only way to break out of the loop is to     reach the last umem DMA block, which means it could end up going beyond the fixed size of 4     iwmr->pgaddrmem array that is used in the lvl==0 case. In the case of QP/CQ/SRQ rings, the value of lvl is     determined by a separate input (for example, req.cq_pages in the case of a CQ). So, we must perform     explicit checking to ensure we don't overflow the pgaddrmem array if the user provides a umem that     consists of more blocks than their provided req.cq_pages. (CVE-2026-74390)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74390

high Nessus Plugin ID 337612

Version 1.4