CVE-2026-72469

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xprtrdma component where the rpcrdma cm event handler() function incorrectly handles the RDMA CM EVENT ADDR CHANGE event. When this event occurs before RDMA CM EVENT ESTABLISHED, the function calls rpcrdma ep put() without a corresponding get operation. This leads to a kref underflow during the connection teardown process, causing rpcrdma xprt disconnect() to operate on a freed endpoint (ep), which can result in a use-after-free scenario.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.