Get real-time updates on Telegram
CVE-2026-90435: Linux 3.11
CVE-2026-90435. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00129 (percentile 0.02258), scored 17-Oct-2026.
Affected technology
Linux · e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to before ccce6b7ef1d7efc59ccba3421e1339c6e63a3d20, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to before d99622e40aaa910ade681dfd4dc0fa240a011331, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to before c845e5e05140ea1bc64a5b1107942d93c876034d, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to before 42fb8aefffff5b458aaa66803364a16e0ea44129, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to before d7fa2ff72ad1861eac194a4e0075d504ba8c246e, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to before 5b6cfc6d7ff0959dd9766fdc24286a253b59ca77, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to before f917707f0de0832b8ab582391b1f64e549995c6c, e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to before dec47e4b0fe34afdf38caa72b4408ba95502e5de
Linux
Linux · 3.11
Linux
Component: Not specified by the source
File: drivers/infiniband/hw/mlx5/qp.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00129 · percentile 0.02258 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-90435.html