CVE-2026-92512

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the RDMA core component. When querying a Queue Pair (QP) via the netlink flow, the synchronization relies on rdma restrack get(). However, during the QP destruction process, rdma restrack del() is called at the end of the ib destroy qp user() function. This timing is too late because vendor-specific resources for the QP are destroyed before the deletion from the tracking database occurs, allowing the QP to be accessed while it is being destroyed. This flaw is triggered within the ib query qp() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.