Linux Kernel Vulnerability in RDMA/efa Affecting Multiple Distributions

CVE-2026-98429

What is CVE-2026-98429?

A vulnerability exists in the Linux kernel related to the RDMA/efa component where the completion IRQ handler improperly accesses the Event Queue (EQ) state and DMA buffer. The issue arises because the IRQ was registered prior to the initialization of the EQ state, leading to a situation where the teardown process releases the buffer before ensuring proper synchronization with the handler. This can potentially lead to system instability and erratic behavior. To mitigate this vulnerability, ensure that the EQ is initialized without arming it, the IRQ is registered afterwards, and the teardown process reverses the resource order by freeing the IRQ before destroying the EQ.

References