CVE-2026-89535

CVE-2026-89535 is a use-after-free vulnerability in the Linux kernel's svcrdma (RDMA-based NFS server) subsystem. In svc_rdma_free(), the call to rdma_destroy_id(sc_cm_id) frees the CM ID while the transport's sc_rn notification entry remains installed in the device's rd_xa xarray until the subse...