Linux Kernel Vulnerability in nvmet-rdma Affecting Resource Management

CVE-2026-98152

What is CVE-2026-98152?

The vulnerability in the Linux kernel's nvmet-rdma component allows for a queue leak when the connection backlog is exceeded. This issue occurs during the handling of pending disconnecting queues, where the connect path inappropriately drops the device reference while failing to manage the newly allocated queue and its associated InfiniBand resources. This oversight can lead to inefficient resource utilization and potential system instability.

References