Linux Distros Unpatched Vulnerability : CVE-2026-89535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the...

DEBIAN-CVE-2026-89535

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the cmid. rpcrdmarnunregister follows, but between those two calls the...

UBUNTU-CVE-2026-89535

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the cmid. rpcrdmarnunregister follows, but between those two calls the...

CVE-2026-89535 svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the cmid. rpcrdmarnunregister follows, but between those two calls the...

CVE-2026-89535 svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the cmid. rpcrdmarnunregister follows, but between those two calls the...

EUVD-2026-76441

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the cmid. rpcrdmarnunregister follows, but between those two calls the...

CVE-2026-89535: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the cmid. rpcrdmarnunregister follows, but between those two calls the...

CVE-2024-42285

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iwconnreqhandler associates a new struct rdmaidprivate connid with an existing struct iwcmid cmid as follows: connid-cmid.iw = cmid; cmid-context = connid; cmid-cmhandl...

CVE-2024-42285 RDMA/iwcm: Fix a use-after-free related to destroying CM IDs

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iwconnreqhandler associates a new struct rdmaidprivate connid with an existing struct iwcmid cmid as follows: connid-cmid.iw = cmid; cmid-context = connid; cmid-cmhandl...

CVE-2024-42285

CVE-2024-42285 affects the Linux kernel RDMA/iwcm subsystem. The issue is a use-after-free involving destroying CM IDs: a newly allocated rdma_id_private (conn_id) is linked to an existing iw_cm_id (cm_id) and used to set cm_id->context and cm_id->cm_handler, while rdma_destroy_id() frees b...

CVE-2024-42285: Use After Free

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iwconnreqhandler associates a new struct rdmaidprivate connid with an existing struct iwcmid cmid as follows: connid-cmid.iw = cmid; cmid-context = connid; cmid-cmhandl...