Vulnerability in Linux Kernel's RDS Component Affecting Multiple Hardware Vendors

CVE-2026-52939

What is CVE-2026-52939?

A vulnerability exists in the RDS (Reliable Datagram Sockets) component of the Linux kernel wherein a NULL pointer dereference can occur when handling masked atomic operations. The issue arises when the rds_ib_send_cqe_handler() function processes a masked atomic completion. Due to the improper handling of specific opcodes, it leads to a potential kernel panic, triggering a fatal exception during operation. This flaw particularly affects unprivileged users sending atomic messages over an active RDS/IB connection, potentially compromising system stability.

References