Linux Kernel Vulnerability Affecting RDMA Functionality

CVE-2026-98353

What is CVE-2026-98353?

A vulnerability in the Linux kernel's RDMA implementation can cause deadlock situations during lookups of Queue Pair (QP) and Completion Queue (CQ) from Event Queue (EQ) interrupts. This occurs when an interrupt arrives while the create-path operation is holding the xa_lock, preventing the lookup from completing and potentially halting essential processes. To mitigate this, IRQ-safe XArray helpers should be employed during QP and CQ updates, ensuring that sleeping allocations do not interfere with interrupt handling. Proper initialization of the arrays with XA_FLAGS_LOCK_IRQ is critical to maintaining system stability.

References