CVE-2026-92513

CVE-2026-92513 is a use-after-free vulnerability in the Linux kernel's mana_ib RDMA driver (Microsoft Azure MANA InfiniBand). The root cause lies in mana_table_store_ud_qp(), which publishes a QP at its send-queue ID before inserting the receive-queue ID, dropping the XArray lock between the two ...

EUVD-2026-81969

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from dev-qpxa and then use or reference them outside the xarray lock. erdmadestroyqp can drop the destroy-path reference and...

CVE-2026-90308

CVE-2026-90308 is a use-after-free race condition in the Linux kernel's RDMA/erdma subsystem. AE QP fatal events and iWARP CM paths load queue pairs from dev->qp_xa and then reference them outside the xarray lock, while erdma_destroy_qp() can concurrently free those QP resources. The fix intro...