« Volver al listado

CVE-2026-98353

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an interrupt arrives while the create path holds the plain xa_lock, the lookup spins forever trying to acquire the same lock.

Use IRQ-safe XArray helpers for all QP and CQ create-path updates, including the GSI QP store and error paths. Initialize both arrays with XA_FLAGS_LOCK_IRQ so sleeping allocations preserve interrupt state.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-98353",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4545f355654d044d35a31cd01cc46f491a8a7c36",
              "lessThan": "74d4085221a7ec5440996af199ccadfa75b9eb0e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "98df2aee1459ee1c62c70cbe9b370d2a532aea36",
              "lessThan": "00baeade709fb66da647e8327e8398bb532e30f7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "610ef81797bb4f709e8675c1d8d093bb9ccdcbd8",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c0a83f29a24c7e7f8516630848ef6db4c174deed",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "05b8ca493dd02319bca93c640b259c2ba51ef321",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1fc9c1933959d2776a1ce7bf424251b8b5b586cd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6e32f84b63c054e09392153125d7202abab2d14b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ec987c0654651036dad6a42f7fa2a6d7c16a3687",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c92686867638cda954fdb2bdbac8a75e3aa6eaae",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7.2.6",
              "lessThan": "7.2.8",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "6.1.188",
              "lessThan": "6.2",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "6.6.157",
              "lessThan": "6.7",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "6.12.110",
              "lessThan": "6.13",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "6.18.52",
              "lessThan": "6.19",
              "versionType": "semver"
            }
          ],
          "programFiles": [
            "drivers/infiniband/hw/erdma/erdma_main.c",
            "drivers/infiniband/hw/erdma/erdma_verbs.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "7.3-rc1"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "7.3-rc1",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.2.8",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc4",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/infiniband/hw/erdma/erdma_main.c",
            "drivers/infiniband/hw/erdma/erdma_verbs.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-10-06T09:18:28.750",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/00baeade709fb66da647e8327e8398bb532e30f7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/74d4085221a7ec5440996af199ccadfa75b9eb0e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables\n\nLocked QP and CQ lookups from EQ interrupts can deadlock with\ncreate-path XArray updates. If an interrupt arrives while the create\npath holds the plain xa_lock, the lookup spins forever trying to\nacquire the same lock.\n\nUse IRQ-safe XArray helpers for all QP and CQ create-path updates,\nincluding the GSI QP store and error paths. Initialize both arrays with\nXA_FLAGS_LOCK_IRQ so sleeping allocations preserve interrupt state."
    }
  ],
  "lastModified": "2026-10-06T09:18:28.750",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}