Linux Kernel Vulnerability in RDS Transmit Path Management

CVE-2026-98070

What is CVE-2026-98070?

A vulnerability in the Linux kernel affecting the Reliable Datagram Sockets (RDS) protocol has been identified. The issue arises in the way the transmit path manages state during socket resets. Specifically, the function rds_tcp_reset_callbacks() improperly handles the quiescing of the transmit path, which could lead to race conditions between different processes. When the transmit state is changed, there is a risk that the state might be in flux, allowing for concurrent processes to interfere with each other’s operations, potentially leading to data corruption or transmission errors. The fix involves implementing proper locking mechanisms during the socket swap process to ensure that all operations are serialized correctly, preventing these harmful interactions and maintaining data integrity.

References