CVE-2026-98430

NameCVE-2026-98430
DescriptionIn the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues alive while IRQ is registered The management IRQ handler accesses both the admin completion queue and the async event queue. The driver registered the IRQ before constructing these queues and destroyed them before freeing the IRQ, so the handler's lifetime was not contained by the resources it accesses. Initialize the queues with interrupts masked, request the IRQ, and then switch to interrupt mode. On removal, reset the device and free the IRQ before destroying the queues. Also reset the device before destroying the queues if IRQ registration fails, because the device already has their DMA addresses.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-4841-1, DLA-4850-1, DSA-6568-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
linux (PTS)bookworm6.1.176-1vulnerable
bookworm (security)6.1.190-1fixed
trixie6.12.107-1vulnerable
trixie (security)6.12.115-2fixed
forky7.2.12-1fixed
sid7.2.15-1fixed
linux-6.12 (PTS)bookworm (security)6.12.113-1~deb12u1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
linuxsourcebookworm6.1.190-1DLA-4841-1
linuxsourcetrixie6.12.113-1DSA-6568-1
linuxsource(unstable)7.2.8-1
linux-6.12sourcebookworm6.12.113-1~deb12u1DLA-4850-1

Notes

https://git.kernel.org/linus/e08aca85c02ff290f785f07acae758f0daf5f49e (7.3-rc4)

Search for package or bug name: Reporting problems