Use-after-free in Linux kernel - CVE-2026-98429

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free and access to uninitialized state in the EFA RDMA driver's completion interrupt handler when event queues are initialized or destroyed. A local user can trigger interrupt handling that accesses event queue state or a DMA buffer outside its valid lifetime to cause a denial of service.

Affected software

How to mitigate CVE-2026-98429

External References

• https://git.kernel.org/stable/c/38871ff47e2a02f8d9a333a65f358d987247b5b0
• https://git.kernel.org/stable/c/3cd652dfcd822af26ba75d6d2d245ea7f73b499e
• https://git.kernel.org/stable/c/795eb34bfd8b1ab347adc41a11e4bb97c3ac0ce6
• https://git.kernel.org/stable/c/9ecd3dcbdf1f315aadc049b291f59c79dc478062
• https://git.kernel.org/stable/c/c767e2812cac83fef70fb8932c3f0fe97dff9388
• https://git.kernel.org/stable/c/e22a3627b7151754f07f90ea3d1ab6e85f5d93f4

Related Security Bulletins

• Use-after-free in Linux kernel hw efa driver
• Debian update for linux