RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-92495
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-17 17:17:51 UTC
Updated2026-10-19 09:19:39 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap bnxt_re_mmap() rejects VM_WRITE for the DBR_PAGE and TOGGLE_PAGE mmap flags, but a read-only mapping can still retain VM_MAYWRITE. nd later be upgraded with mprotect(PROT_WRITE). This can bypass the write check that only runs at mmap time. Clear VM_MAYWRITE before vm_insert_page() in the shared DBR/toggle-page branch, matching the existing policy that userspace writes are not expected for these pages.

Risk And Classification

EPSS: 0.002100000 probability, percentile 0.115120000 (date 2026-09-18)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected ea222485788208cd79bad42d25aae9232b33a934 5361fb1e5bc246f9a2c0721543f72c8dac200769 git Not specified
CNA Linux Linux affected ea222485788208cd79bad42d25aae9232b33a934 13e7861809ef9e7e720ff5f0af1d4293a6d0a9b4 git Not specified
CNA Linux Linux affected ea222485788208cd79bad42d25aae9232b33a934 0afbfe019c881483337d9f8304e678af05ebe7cc git Not specified
CNA Linux Linux affected ea222485788208cd79bad42d25aae9232b33a934 518df61b9b0a5b288dfa72c87246045329c18b8c git Not specified
CNA Linux Linux affected ea222485788208cd79bad42d25aae9232b33a934 9b66c9af7172ffcf727214fa0ebe9a5e1ed6eb16 git Not specified
CNA Linux Linux affected 6.6 Not specified
CNA Linux Linux unaffected 6.6 semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.110 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.52 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/5361fb1e5bc246f9a2c0721543f72c8dac200769 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/9b66c9af7172ffcf727214fa0ebe9a5e1ed6eb16 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/0afbfe019c881483337d9f8304e678af05ebe7cc 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/518df61b9b0a5b288dfa72c87246045329c18b8c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/13e7861809ef9e7e720ff5f0af1d4293a6d0a9b4 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report