CVE-2026-89510

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the RDMA/cxgb4 component. The c4iw remove() function can free the ctx->dev object while registration work is still pending or running. This allows the c4iw register device() function to access the freed device memory. The issue occurs because c4iw uld state change() queues reg work to register the RDMA device, but this work is not cancelled before the device is removed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.