Linux Kernel Security Flaw in RDMA Implementation

CVE-2026-98354

What is CVE-2026-98354?

A vulnerability exists in the Linux kernel's RDMA subsystem where a buffer leak occurs during PKey enforcement failures. Specifically, the function ib_mad_complete_recv() fails to properly manage memory when a security check does not pass. This can lead to unintended memory retention, as the buffer is never released under certain error conditions. An attacker could exploit this by repeatedly sending messages with incorrect PKeys, effectively consuming system resources and leading to potential service degradation.

References