CVE-2026-72468

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists when a local administrator performs an NFS/RDMA mount simultaneously with the removal of an RDMA device. The function rpcrdma create id() registers ep->re rn with the rpcrdma ib client before the pointer is stored in ep->re id by rpcrdma ep create(). If rpcrdma remove one() processes the registration notification before the assignment to ep->re id occurs, rpcrdma ep removal done() invokes trace xprtrdma device removal(NULL). This leads to a NULL pointer dereference when the tracepoint attempts to access id->device->name and id->route.addr.dst addr, potentially causing a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.