CVE-2026-92508

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the RDMA core component. When accessing a Completion Queue (CQ) via the netlink path, the synchronization relies on rdma restrack get(). Because rdma restrack del() is called at the end of the ib free cq() function, a window exists where the CQ remains accessible through restrack after vendor-specific resources have been freed, potentially leading to a crash or memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.