CVE-2026-92513

CVE-2026-92513 is a use-after-free vulnerability in the Linux kernel's mana_ib RDMA driver (Microsoft Azure MANA InfiniBand). The root cause lies in mana_table_store_ud_qp(), which publishes a QP at its send-queue ID before inserting the receive-queue ID, dropping the XArray lock between the two ...

EUVD-2026-81969

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from dev-qpxa and then use or reference them outside the xarray lock. erdmadestroyqp can drop the destroy-path reference and...

CVE-2026-90308

CVE-2026-90308 is a use-after-free race condition in the Linux kernel's RDMA/erdma subsystem. AE QP fatal events and iWARP CM paths load queue pairs from dev->qp_xa and then reference them outside the xarray lock, while erdma_destroy_qp() can concurrently free those QP resources. The fix intro...

AZL-83711 CVE-2026-31565 affecting package kernel for versions less than 6.6.134.1-2

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock during netdev reset with active connections Resolve deadlock that occurs when user executes netdev reset while RDMA applications e.g., rping are active. The netdev reset causes ice driver to remove irdma...