CVE-2026-93267

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. During object deallocation, internal resources associated with a Direct Memory Access Handle DMAH may be freed before the handle is removed from resource tracking. A local attacker can exploit this race condition...

PT-2026-97954

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbs free dmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is rdma restrack get. Currently, rdma restrack del is invoked at the end ...

CVE-2026-53187

The CVE-2026-53187 issue affects the Linux kernel RDMA/core: the cpu_id supplied via UVERBS_ATTR_ALLOC_DMAH_CPU_ID is passed to cpumask_test_cpu() without validating it against nr_cpu_ids, leading to an out-of-bounds read of the cpumask bitmap. On kernels built with CONFIG_DEBUG_PER_CPU_MAPS this...

CVE-2026-53187 RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate cpuid against nrcpuids in DMAH alloc The cpuid attribute supplied by user space through UVERBSATTRALLOCDMAHCPUID is passed directly to cpumasktestcpu without first verifying that the value is within the valid...

CVE-2026-53187: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate cpuid against nrcpuids in DMAH alloc The cpuid attribute supplied by user space through UVERBSATTRALLOCDMAHCPUID is passed directly to cpumasktestcpu without first verifying that the value is within the valid...