Answer in brief
CVE-2026-74397 records a Unknown severity vulnerability in IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=146d2f1af3245a10b13eef263687e54f4e253d1d <2c3b2667dad69d56774b79db763acb3a1bee0fc0 || >=146d2f1af3245a10b13eef263687e54f4e253d1d <37fc3cc0f924fd8d0f0cf87b92672dec75a32e57 || >=146d2f1af3245a10b13eef263687e54f4e253d1d <65e344925fa30abf50c8de8c150b397715fa2066 || >=146d2f1af3245a10b13eef263687e54f4e253d1d <f88e12c95fc19f719e06ca1e9eb20fdad68ef61a || >=146d2f1af3245a10b13eef263687e54f4e253d1d <e79389115b9d27287ff6230a9750675106ed7668 | 2c3b2667dad69d56774b79db763acb3a1bee0fc0, 37fc3cc0f924fd8d0f0cf87b92672dec75a32e57, 65e344925fa30abf50c8de8c150b397715fa2066, f88e12c95fc19f719e06ca1e9eb20fdad68ef61a, e79389115b9d27287ff6230a9750675106ed7668 |
| Linux/Linuxgeneric | 4.5 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5_ib_alloc_transport_domain() allocates a transport domain and then may fail in mlx5_ib_enable_lb(). In that case, the allocated TD is leaked. Fix this by deallocating the TD when mlx5_ib_enable_lb() returns an error. Also return 0 explicitly in the no-loopback-capability success branch, and move dev->lb.mutex initialization to mlx5_ib_stage_init_init().
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-74397 records a Unknown severity vulnerability in IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=146d2f1af3245a10b13eef263687e54f4e253d1d <2c3b2667dad69d56774b79db763acb3a1bee0fc0 || >=146d2f1af3245a10b13eef263687e54f4e253d1d <37fc3cc0f924fd8d0f0cf87b92672dec75a32e57 || >=146d2f1af3245a10b13eef263687e54f4e253d1d <65e344925fa30abf50c8de8c150b397715fa2066 || >=146d2f1af3245a10b13eef263687e54f4e253d1d <f88e12c95fc19f719e06ca1e9eb20fdad68ef61a || >=146d2f1af3245a10b13eef263687e54f4e253d1d <e79389115b9d27287ff6230a9750675106ed7668 | 2c3b2667dad69d56774b79db763acb3a1bee0fc0, 37fc3cc0f924fd8d0f0cf87b92672dec75a32e57, 65e344925fa30abf50c8de8c150b397715fa2066, f88e12c95fc19f719e06ca1e9eb20fdad68ef61a, e79389115b9d27287ff6230a9750675106ed7668 |
| Linux/Linuxgeneric | 4.5 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5_ib_alloc_transport_domain() allocates a transport domain and then may fail in mlx5_ib_enable_lb(). In that case, the allocated TD is leaked. Fix this by deallocating the TD when mlx5_ib_enable_lb() returns an error. Also return 0 explicitly in the no-loopback-capability success branch, and move dev->lb.mutex initialization to mlx5_ib_stage_init_init().
Quoted source text, attributed separately from HOL analysis.