15 matches found
SUSE CVE-2026-90173
In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ibfreecq smbdirectconnectiondestroyqp creates the send and receive completion queues with iballoccqany, which for IBPOLLWORKQUEUE arms an internal completion handler that runs...
SUSE CVE-2026-92508
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...
Linux Distros Unpatched Vulnerability : CVE-2026-92508
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is...
CVE-2026-92508
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...
DEBIAN-CVE-2026-92508
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...
AZL-102609 CVE-2026-92508 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...
CVE-2026-90173
In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ibfreecq smbdirectconnectiondestroyqp creates the send and receive completion queues with iballoccqany, which for IBPOLLWORKQUEUE arms an internal completion handler that runs...
CVE-2026-92508 RDMA/core: Fix potential use after free in ib_free_cq()
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...
EUVD-2026-82129
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...
CVE-2026-92508
CVE-2026-92508 is a potential use-after-free in the Linux kernel's RDMA/core subsystem, specifically in ib_free_cq(). When a Completion Queue (CQ) is accessed via the netlink path, rdma_restrack_del() was invoked only at the very end of ib_free_cq()—after vendor-specific resources had already bee...
CVE-2026-92508 RDMA/core: Fix potential use after free in ib_free_cq()
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...
CVE-2026-90173 smb: smbdirect: free completion queues with ib_free_cq()
In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ibfreecq smbdirectconnectiondestroyqp creates the send and receive completion queues with iballoccqany, which for IBPOLLWORKQUEUE arms an internal completion handler that runs...
EUVD-2026-81766
In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ibfreecq smbdirectconnectiondestroyqp creates the send and receive completion queues with iballoccqany, which for IBPOLLWORKQUEUE arms an internal completion handler that runs...
CVE-2026-90173
A slab-use-after-free vulnerability in the Linux kernel's smbdirect driver (SMB over RDMA) is triggered when smbdirect_connection_destroy_qp() tears down completion queues with ib_destroy_cq() instead of ib_free_cq(). Because ib_destroy_cq() does not cancel the internal workqueue poll handler, a ...
CVE-2026-92508: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...