Linux Kernel Vulnerability in RDMA Device Management

CVE-2026-98359

What is CVE-2026-98359?

A vulnerability exists in the Linux kernel's management of RDMA devices, particularly with the ib_get_eth_speed function. This issue arises when a net_device that is undergoing unregistration is still referenced, allowing for potential unsafe access by asynchronously running RDMA port queries. This can occur after the device has been marked as unregistered and its resources deallocated, leading to operational issues. The solution involves implementing checks during operations to ensure the device's registration state is validated, thereby preventing operations on devices that are in the process of being unregistered.

References