Net Vulnerability in Qualcomm RMNET for Linux Kernel

CVE-2026-89780

What is CVE-2026-89780?

A vulnerability in the Qualcomm RMNET implementation within the Linux kernel allows an unprivileged user to trigger a null pointer dereference. This occurs when the system processes deaggregated frames with an unassigned socket buffer device (skb->dev is NULL). Specifically, when a user creates an RMNET link over a tap device paired with ingress deaggregation commands and sends a flow-control command, it leads to kernel panic due to an attempt to lock a null device. The fix ensures that every skb leaving the RMNET deaggregation handler has a valid device assignment, thus mitigating the risk of system crashes.

References