Use-after-free in Linux kernel - CVE-2026-98430

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free in the Linux kernel EFA RDMA driver's management interrupt handler when handling interrupts during device removal. A local user can exploit interrupt handling that accesses already-destroyed admin completion and asynchronous event queues to cause a denial of service.

The lifetime mismatch also permits the interrupt handler to access these queues before they have been initialized during device initialization.

Affected software

How to mitigate CVE-2026-98430

External References

• https://git.kernel.org/stable/c/00f7df59543cce445cfd2f109ace88c17d8aef4d
• https://git.kernel.org/stable/c/0a8a105978e5ace0d885964317c5aed8ab4c0a0c
• https://git.kernel.org/stable/c/bc7e64bad96c23fb343f47689670d0037f1a65e7
• https://git.kernel.org/stable/c/cf5520d1c931a70ccce0a1a247113bcec47a42be
• https://git.kernel.org/stable/c/d2a1c0bf4139c17b8d7668322b78c28d8c5b2dd0
• https://git.kernel.org/stable/c/e08aca85c02ff290f785f07acae758f0daf5f49e

Related Security Bulletins

• Use-after-free in Linux kernel hw efa driver
• Debian update for linux