Use After Free Vulnerability in Linux Kernel's RDMA Component

CVE-2026-93267

What is CVE-2026-93267?

A vulnerability has been identified in the Linux Kernel RDMA (Remote Direct Memory Access) component, which could allow for a use-after-free scenario. Specifically, when a device memory handle (dmah) is accessed via netlink, improper management of resource lifecycle may occur. The synchronization mechanism in place, rdma_restrack_get(), leaves a window during which vendor-specific resources associated with a dmah can be freed while still accessible through restrack, potentially leading to unauthorized accesses or crashes. This issue has been addressed by modifying the resource management flow, ensuring that resources are correctly removed from restrack at the beginning of the destruction process, preserving the integrity of resource lifecycles and preventing unsafe access.

References