Linux Kernel Vulnerability in RDS Component by Vendor

CVE-2026-99212

What is CVE-2026-99212?

A vulnerability in the Linux kernel related to the RDMA (Remote Direct Memory Access) component has been identified, posing risks during connection management. The issue arises when the rdma_cm attempts to destroy an identifier associated with RDS during route failures, potentially leading to resource leaks and unstable connections. Specifically, the failure to manage the connection identifier correctly leaves it marked as 'connecting,' even after the ID has been freed, which can lead to subsequent attempts to use a freed ID. Proper handling should dictate that the connection is dropped, retaining control over the identifier, thus preventing mishandling during reconnections and ensuring robust connection management.

References