Skip to main content
← All vulnerabilities
CVE-2026-98353

RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.2, 6.7, 6.13, 6.18.58, 7.2.8
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an interrupt arrives while the create path holds the plain xa_lock, the lookup spins forever trying to acquire the same lock. Use IRQ-safe XArray helpers for all QP and CQ create-path updates, including the GSI QP store and error paths. Initialize both arrays with XA_FLAGS_LOCK_IRQ so sleeping allocations preserve interrupt state.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 1fc9c1933959d2776a1ce7bf424251b8b5b586cd · fixed in e32aa1d85126e6d5ef6efd594ced3f75178886ce; From 4545f355654d044d35a31cd01cc46f491a8a7c36 · fixed in 74d4085221a7ec5440996af199ccadfa75b9eb0e; From 98df2aee1459ee1c62c70cbe9b370d2a532aea36 · fixed in 00baeade709fb66da647e8327e8398bb532e30f7; From 6.1.188 · fixed in 6.2; From 6.6.157 · fixed in 6.7; From 6.12.110 · fixed in 6.13; From 6.6.160 · fixed in 6.7

  • Linux Linux

    From 6.18.52 · fixed in 6.18.58; From 7.2.6 · fixed in 7.2.8

  • KernelLinux

    From 6.18.52 · fixed in 6.18.58; From 7.2.6 · fixed in 7.2.8

References 3

git.kernel.org