5 matches found
AZL-102878 CVE-2026-90309 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev-cqxa and invoke CQ completion or error callbacks outside the xarray lock. erdmadestroycq can erase the CQ from the xarray and free its queu...
CVE-2026-90309
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev-cqxa and invoke CQ completion or error callbacks outside the xarray lock. erdmadestroycq can erase the CQ from the xarray and free its queu...
CVE-2026-90309
CVE-2026-90309 is a use-after-free vulnerability in the Linux kernel's RDMA/erdma subsystem. Event Queue (EQ) handlers look up Completion Queues (CQs) from dev->cq_xa and invoke CQ completion or error callbacks outside the xarray lock. The function erdma_destroy_cq() can erase the CQ from the ...
CVE-2026-90309 RDMA/erdma: Hold CQ references when processing EQ events
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev-cqxa and invoke CQ completion or error callbacks outside the xarray lock. erdmadestroycq can erase the CQ from the xarray and free its queu...
EUVD-2026-81970
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev-cqxa and invoke CQ completion or error callbacks outside the xarray lock. erdmadestroycq can erase the CQ from the xarray and free its queu...