CVE-2026-92513

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the RDMA mana ib component. The function mana table store ud qp() publishes a Queue Pair (QP) at its send-queue id before inserting the receive-queue id, releasing the XArray lock between two xa insert irq() calls. A concurrent completion handler may look up the QP and create a transient reference. If the second insertion fails, the rollback process only erases the send-queue entry. This leaves the initial table reference and the transient reference active while the RDMA core frees the QP.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.