7.8

CVE-2026-90308

RDMA/erdma: Hold QP references for AE and CM processing

In the Linux kernel, the following vulnerability has been resolved:

RDMA/erdma: Hold QP references for AE and CM processing

AE QP fatal events and iWARP CM paths load QPs from dev->qp_xa
and then use or reference them outside the xarray lock.
erdma_destroy_qp() can drop the destroy-path reference and free QP
resources while such a lookup is in flight.

Add erdma_qp_get_by_qpn() to acquire a kref under the xarray
lock with kref_get_unless_zero(). Remove the QP from the xarray
before dropping the destroy-path reference so no new lookup can acquire
it while destruction waits for existing users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 155055771704f8cbb5c176a4309b7dc30a50450c
Version < 6e32f84b63c054e09392153125d7202abab2d14b
Status affected
Version 155055771704f8cbb5c176a4309b7dc30a50450c
Version < ec987c0654651036dad6a42f7fa2a6d7c16a3687
Status affected
Version 155055771704f8cbb5c176a4309b7dc30a50450c
Version < c92686867638cda954fdb2bdbac8a75e3aa6eaae
Status affected
Version 155055771704f8cbb5c176a4309b7dc30a50450c
Version < a52eeff32024f190b3bdc99088c7becccd4fa60b
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.0
Status affected
Version 0
Version < 6.0
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.06
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/6e32f84b63c054e09392153125d7202abab2d14b
https://git.kernel.org/stable/c/ec987c0654651036dad6a42f7fa2a6d7c16a3687
https://git.kernel.org/stable/c/c92686867638cda954fdb2bdbac8a75e3aa6eaae
https://git.kernel.org/stable/c/a52eeff32024f190b3bdc99088c7becccd4fa60b