UBUNTU-CVE-2026-98366

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxereregusermr reassigns mr-ibmr.pd first and only then validates the IBMRREREGACCESS argument: if flags & IBMRREREGPD rxeputoldpd; rxegetpd; mr-ibmr.pd = ibpd; if flags...

CVE-2026-98366

A slab-use-after-free vulnerability exists in the Linux kernel 's RDMA/rxe driver. The root cause is that the rxe_rereg_user_mr() function reassigns the memory region's protection domain (mr->ibmr.pd) before validating the IB_MR_REREG_ACCESS argument. If the access check fails, the function re...