Linux Kernel RDMA/siw Vulnerability in Multiple Products

CVE-2026-98367

What is CVE-2026-98367?

The Linux kernel presents a vulnerability in the RDMA/siw subsystem where improper error handling during the siw_accept operation may lead to use-after-free conditions. If the siw_qp_modify function fails, the state lock is released prematurely, allowing for concurrent modifications that could lead to potential exploitation of the QP's association. This defect raises significant security concerns as it may allow unauthorized access or manipulation of the kernel's memory.

References