Lucene search
+L

5 matches found

OSV
OSV
added 2026/09/17 5:17 p.m.3 views

AZL-102878 CVE-2026-90309 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev-cqxa and invoke CQ completion or error callbacks outside the xarray lock. erdmadestroycq can erase the CQ from the xarray and free its queu...

7.8CVSS0.00205EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 5:17 p.m.5 views

CVE-2026-90309

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev-cqxa and invoke CQ completion or error callbacks outside the xarray lock. erdmadestroycq can erase the CQ from the xarray and free its queu...

7.8CVSS0.00205EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/17 4:08 p.m.8 views

CVE-2026-90309

CVE-2026-90309 is a use-after-free vulnerability in the Linux kernel's RDMA/erdma subsystem. Event Queue (EQ) handlers look up Completion Queues (CQs) from dev->cq_xa and invoke CQ completion or error callbacks outside the xarray lock. The function erdma_destroy_cq() can erase the CQ from the ...

7.8CVSS0.00205EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/17 4:08 p.m.4 views

CVE-2026-90309 RDMA/erdma: Hold CQ references when processing EQ events

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev-cqxa and invoke CQ completion or error callbacks outside the xarray lock. erdmadestroycq can erase the CQ from the xarray and free its queu...

7.8CVSS
SaveExploits0References9
EUVD
EUVD
added 2026/09/17 4:08 p.m.4 views

EUVD-2026-81970

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev-cqxa and invoke CQ completion or error callbacks outside the xarray lock. erdmadestroycq can erase the CQ from the xarray and free its queu...

0.00205EPSS
SaveExploits0References6
Rows per page
Query Builder