All vulnerabilities
CVE-2026-98353

Linux: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

Linux LinuxOperating systems
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.16%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in74d4085221a7ec5440996af199ccadfa75b9eb0eAlso 00baeade709fb66da647e8327e8398bb532e30f7, 6.2 and 4 moreCVE List
Published6 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

Show all 7 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an interrupt arrives while the create path holds the plain xa_lock, the lookup spins forever trying to acquire the same lock.

Use IRQ-safe XArray helpers for all QP and CQ create-path updates, including the GSI QP store and error paths. Initialize both arrays with XA_FLAGS_LOCK_IRQ so sleeping allocations preserve interrupt state.

Text from CVE List

Affected versions 16

  • Linuxaffected: 1fc9c1933959d2776a1ce7bf424251b8b5b586cd before e32aa1d85126e6d5ef6efd594ced3f75178886ceCVE List
  • Linuxaffected: 4545f355654d044d35a31cd01cc46f491a8a7c36 before 74d4085221a7ec5440996af199ccadfa75b9eb0eCVE List
  • Linuxaffected: 98df2aee1459ee1c62c70cbe9b370d2a532aea36 before 00baeade709fb66da647e8327e8398bb532e30f7CVE List
  • Linuxaffected: 610ef81797bb4f709e8675c1d8d093bb9ccdcbd8CVE List
  • Linuxaffected: c0a83f29a24c7e7f8516630848ef6db4c174deedCVE List
  • Linuxaffected: 05b8ca493dd02319bca93c640b259c2ba51ef321CVE List
  • Linuxaffected: 233f1b7fe2980e4e238fe03dd3ceddfd082cb4c8CVE List
  • Linuxaffected: 6e32f84b63c054e09392153125d7202abab2d14bCVE List
  • Linuxaffected: ec987c0654651036dad6a42f7fa2a6d7c16a3687CVE List
  • Linuxaffected: c92686867638cda954fdb2bdbac8a75e3aa6eaaeCVE List
  • Linuxaffected: 6.1.188 before 6.2CVE List
  • Linuxaffected: 6.6.157 before 6.7CVE List
  • Linuxaffected: 6.12.110 before 6.13CVE List
  • Linuxaffected: 6.6.160 before 6.7CVE List
  • Linuxaffected: 6.18.52 before 6.18.58CVE List
  • Linuxaffected: 7.2.6 before 7.2.8CVE List

References 3