PT-2026-54823 · Linux+1 · Linux Kernel+1

CVE-2026-53355

·

Published

2026-06-02

·

Updated

2026-09-07

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the RDS IB connection teardown path, which is designed to operate during partial startup and repeated shutdown attempts by using NULL pointers to track resource ownership. When the rds ib setup qp() function fails after allocating i sends but before allocating i recvs, the sends out path frees i sends without clearing the pointer. This results in a stale pointer that subsequent shutdown passes may incorrectly treat as a live send ring allocation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

NULL Pointer Dereference

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13857
CVE-2026-53355
ECHO-80A4-A304-35CE
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
SUSE-SU-2026:3594-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu