Operation on a Resource after Expiration or Release in Linux kernel - CVE-2026-98154

Vulnerability details

The vulnerability allows a local user to compromise confidentiality, integrity, and availability.

The vulnerability exists due to improper cleanup of completed requests in the nvme_rdma_queue_rq function when handling an -EIO error in the NVMe RDMA queue request path. A local user can trigger an -EIO error during queue request processing to compromise confidentiality, integrity, and availability.

Affected software

How to mitigate CVE-2026-98154

External References

• https://git.kernel.org/stable/c/171b993a4aed9889159df4815b6a6ba141e61975
• https://git.kernel.org/stable/c/a41e7fc8d244d9cfc6273051aed85b67adedbb89
• https://git.kernel.org/stable/c/cf3e706963ffbd3ee2568fa0d08ab016f0575ea8
• https://git.kernel.org/stable/c/d61828199c6cb4b76d48403c77023cd4bb9d09fc

Related Security Bulletins

• Operation on a Resource after Expiration or Release in Linux kernel nvme host driver