CVE-2026-89531

In the Linux kernel, the following vulnerability has been resolved:

svcrdma: Reject connection when transport allocation fails

handle connect req() returns without action when svc rdma create xprt() fails to allocate the new transport. The CM core returns 0 for CONNECT REQUEST events, so it does not destroy the new rdma cm id. Each allocation failure under memory pressure leaks one rdma cm id, and a remote peer driving connection attempts can amplify this.

Reject the connection by returning a non-zero status from the CM event handler, which tells the CM core to destroy the orphaned cm id.