SB2026100707 - Use-after-free in Linux kernel sw siw driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026100707

SB2026100707 - Use-after-free in Linux kernel sw siw driver

Published: October 7, 2026

Security Bulletin ID SB2026100707
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Use-after-free (CVE-ID: CVE-2026-98367)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a local user to corrupt kernel memory.

The vulnerability exists due to use-after-free in the RDMA/siw siw_accept() function when cleaning up after a failed siw_qp_modify() call. A local user can trigger a concurrent queue pair transition to the error state to corrupt kernel memory.

Exploitation requires the concurrent transition to occur after the queue pair state lock is released but before connection endpoint cleanup completes.


Remediation

Install update from vendor's website.

References