CVE-2026-98430
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:
RDMA/efa: Mantener las colas de administración activas mientras el IRQ está registrado
El manejador de IRQ de gestión accede tanto a la cola de finalización de administración como a la cola de eventos asíncronos. El controlador registraba el IRQ antes de construir estas colas y las destruía antes de liberar el IRQ, por lo que la vida útil del manejador no estaba limitada por los recursos a los que accede.
Inicialice las colas con las interrupciones enmascaradas, solicite el IRQ y, a continuación, cambie al modo de interrupción.
Leer descripción completaMostrar menos
Durante la eliminación, restablezca el dispositivo y libere el IRQ antes de destruir las colas. Además, restablezca el dispositivo antes de destruir las colas si falla el registro del IRQ, porque el dispositivo ya tiene sus direcciones DMA.
Traducción automática del texto original de NVD (en inglés).
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.21 %
- Percentil entre todas las CVEs puntuadas
- 11
- Fecha de la puntuación
- 21/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
Mostrar las 6 referencias
- https://git.kernel.org/stable/c/00f7df59543cce445cfd2f109ace88c17d8aef4d
- https://git.kernel.org/stable/c/0a8a105978e5ace0d885964317c5aed8ab4c0a0c
- https://git.kernel.org/stable/c/bc7e64bad96c23fb343f47689670d0037f1a65e7
- https://git.kernel.org/stable/c/cf5520d1c931a70ccce0a1a247113bcec47a42be
- https://git.kernel.org/stable/c/d2a1c0bf4139c17b8d7668322b78c28d8c5b2dd0
- https://git.kernel.org/stable/c/e08aca85c02ff290f785f07acae758f0daf5f49e
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-98430",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "b7f5e880f3774ff1934ce272e1c3b673a3a9c414",
"lessThan": "0a8a105978e5ace0d885964317c5aed8ab4c0a0c",
"versionType": "git"
},
{
"status": "affected",
"version": "b7f5e880f3774ff1934ce272e1c3b673a3a9c414",
"lessThan": "00f7df59543cce445cfd2f109ace88c17d8aef4d",
"versionType": "git"
},
{
"status": "affected",
"version": "b7f5e880f3774ff1934ce272e1c3b673a3a9c414",
"lessThan": "bc7e64bad96c23fb343f47689670d0037f1a65e7",
"versionType": "git"
},
{
"status": "affected",
"version": "b7f5e880f3774ff1934ce272e1c3b673a3a9c414",
"lessThan": "d2a1c0bf4139c17b8d7668322b78c28d8c5b2dd0",
"versionType": "git"
},
{
"status": "affected",
"version": "b7f5e880f3774ff1934ce272e1c3b673a3a9c414",
"lessThan": "cf5520d1c931a70ccce0a1a247113bcec47a42be",
"versionType": "git"
},
{
"status": "affected",
"version": "b7f5e880f3774ff1934ce272e1c3b673a3a9c414",
"lessThan": "e08aca85c02ff290f785f07acae758f0daf5f49e",
"versionType": "git"
}
],
"programFiles": [
"drivers/infiniband/hw/efa/efa_com.c",
"drivers/infiniband/hw/efa/efa_main.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.2"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.2",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.112",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.54",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.8",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/infiniband/hw/efa/efa_com.c",
"drivers/infiniband/hw/efa/efa_main.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-10-14T14:17:54.697",
"references": [
{
"url": "https://git.kernel.org/stable/c/00f7df59543cce445cfd2f109ace88c17d8aef4d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/0a8a105978e5ace0d885964317c5aed8ab4c0a0c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/bc7e64bad96c23fb343f47689670d0037f1a65e7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/cf5520d1c931a70ccce0a1a247113bcec47a42be",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d2a1c0bf4139c17b8d7668322b78c28d8c5b2dd0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e08aca85c02ff290f785f07acae758f0daf5f49e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/efa: Keep admin queues alive while IRQ is registered\n\nThe management IRQ handler accesses both the admin completion queue and the\nasync event queue. The driver registered the IRQ before constructing these\nqueues and destroyed them before freeing the IRQ, so the handler's lifetime\nwas not contained by the resources it accesses.\n\nInitialize the queues with interrupts masked, request the IRQ, and then\nswitch to interrupt mode. On removal, reset the device and free the IRQ\nbefore destroying the queues. Also reset the device before destroying the\nqueues if IRQ registration fails, because the device already has their DMA\naddresses."
}
],
"lastModified": "2026-10-19T10:18:49.713",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}