Memory Reference Vulnerability in Linux Kernel's RDMA/rxe Component

CVE-2026-98366

What is CVE-2026-98366?

A vulnerability exists within the RDMA/rxe component of the Linux Kernel that can lead to use-after-free conditions in user memory registrations. When reassigning memory resources, the access flags are not properly validated before the state mutation occurs. This can allow an attacker to manipulate memory and cause potential crashes or arbitrary code execution by exploiting the incorrect handling of memory references. The issue has been documented and mitigated in recent kernel updates.

References