CVE-2026-92514
Description
A flaw was found in the Linux kernel. When the RDMA/erdma component's Completion Event Queue (CEQ) tasklet is being removed, it can attempt to access memory that has already been released. This 'use-after-free' vulnerability can lead to memory corruption, which might allow an attacker to cause the system to crash (denial of service) or potentially gain elevated privileges.
Statement
This vulnerability is assessed as Moderate severity because it requires local access and is restricted to environments utilizing Alibaba Elastic RDMA (erdma) network adapters, significantly limiting the affected deployment base. The use-after-free condition occurs only during device shutdown or driver uninitialization routines, operations typically initiated by privileged administrators. Default installations without erdma hardware or where the driver module is not loaded remain unaffected.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
