CVE-2026-92508

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...

CVE-2026-92511

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdestroycquser When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

AZL-102726 CVE-2026-92507 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdeallocpduser When accessing a PD via the netlink path the only synchronization mechanism for the said PD is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-92507

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdeallocpduser When accessing a PD via the netlink path the only synchronization mechanism for the said PD is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-92510

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdestroysrquser When accessing a SRQ via the netlink path the only synchronization mechanism for the said SRQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

DEBIAN-CVE-2026-92511

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdestroycquser When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

AZL-102734 CVE-2026-92511 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdestroycquser When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-92511 RDMA/core: Fix potential use after free in ib_destroy_cq_user()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdestroycquser When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-92511 RDMA/core: Fix potential use after free in ib_destroy_cq_user()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdestroycquser When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-92511

CVE-2026-92511 is a use-after-free vulnerability in the Linux kernel's RDMA/core subsystem, specifically in ib_destroy_cq_user(). When a Completion Queue (CQ) is accessed via the netlink path, the only synchronization mechanism is rdma_restrack_get(). The flaw arises because rdma_restrack_del() w...

CVE-2026-92510

CVE-2026-92510 is a use-after-free in the Linux kernel's RDMA/core subsystem, specifically in ib_destroy_srq_user(). When a Shared Receive Queue (SRQ) is destroyed via the netlink path, rdma_restrack_del() was invoked at the end of the function—after vendor-specific resources may already be freed...

CVE-2026-92509

CVE-2026-92509 is a potential use-after-free in the Linux kernel RDMA/core subsystem, specifically in the counter_release() function. The root cause is a timing issue: rdma_restrack_del() was invoked at the end of counter_release(), after vendor-specific resources had already been freed. This lef...

EUVD-2026-82130

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in counterrelease When accessing a counter via the netlink path the only synchronization mechanism for the said counter is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end ...

CVE-2026-92510 RDMA/core: Fix potential use after free in ib_destroy_srq_user()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdestroysrquser When accessing a SRQ via the netlink path the only synchronization mechanism for the said SRQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-92508 RDMA/core: Fix potential use after free in ib_free_cq()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...

CVE-2026-92508

CVE-2026-92508 is a potential use-after-free in the Linux kernel's RDMA/core subsystem, specifically in ib_free_cq(). When a Completion Queue (CQ) is accessed via the netlink path, rdma_restrack_del() was invoked only at the very end of ib_free_cq()—after vendor-specific resources had already bee...

EUVD-2026-82129

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibfreecq When accessing a CQ via the netlink path the only synchronization mechanism for the said CQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of ibfreecq, whi...

CVE-2026-92507 RDMA/core: Fix potential use after free in ib_dealloc_pd_user()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdeallocpduser When accessing a PD via the netlink path the only synchronization mechanism for the said PD is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-92507 RDMA/core: Fix potential use after free in ib_dealloc_pd_user()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdeallocpduser When accessing a PD via the netlink path the only synchronization mechanism for the said PD is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: The MR restrack must be released when it is deleted. The MR restrack also needs to be released when it is deleted; otherwise, a memory leak may occur, as the task struct will not be released...