Deadlock in Linux kernel - CVE-2026-98353

Vulnerability identifier: #VU153675

CSH Severity: Low

CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98353

CWE-ID: CWE-833

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper synchronization of XArray locking in the RDMA/erdma driver when event queue interrupts perform queue pair or completion queue lookups during create-path updates. A local user can create queue pairs or completion queues concurrently with these interrupts to cause a denial of service.

The deadlock occurs if an interrupt arrives while the create path holds the same XArray lock needed by the interrupt handler, causing the handler to spin indefinitely.

Linux kernel
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1

• https://git.kernel.org/stable/c/00baeade709fb66da647e8327e8398bb532e30f7
• https://git.kernel.org/stable/c/74d4085221a7ec5440996af199ccadfa75b9eb0e

• Deadlock in Linux kernel hw erdma driver
• SUSE update for the Linux Kernel