CVE-2026-89798

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the rpcrdma module during notification registration. The function rpcrdma rn register() inserts the rn object into the rd xa xarray using xa alloc() before assigning the callback to rn->rn done. This allows rpcrdma remove one() to potentially access the rn object while rn->rn done is still NULL, leading to a null function pointer dereference during device removal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.