Use-after-free in Linux kernel - CVE-2026-92513

Vulnerability details

The vulnerability allows a local user to cause a use-after-free condition.

The vulnerability exists due to improper reference counting in mana_table_store_ud_qp() when inserting user datagram queue-pair identifiers into the QP table. A local user can trigger a partial QP table insertion while a concurrent completion handler holds a queue-pair reference to cause a use-after-free condition.

Affected software

How to mitigate CVE-2026-92513

External References

• https://git.kernel.org/stable/c/4aaa2ab816c710be7385b31d08373edcdcd71656
• https://git.kernel.org/stable/c/638b9a5364c1482e5d104823c1a3884b3d249484
• https://git.kernel.org/stable/c/97f7c2262c28ebcae64fc957ee978646684a5ed9

Related Security Bulletins

• Use-after-free in Linux kernel hw mana driver