All vulnerabilities
CVE-2026-98355

Linux: RDMA/rtrs: guard against null kobj name

Linux LinuxOperating systems
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in99c24a8968ebef0573825b5cb89d5985d51635b9Fixed versionCVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 99c24a8968ebef0573825b5cb89d5985d51635b9LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rtrs: guard against null kobj name

In the client, if init_path() errors, the callee tries to clean up with rtrs_clt_close_conns(). However, this can lead to calling the event tracing code with clt_path->kobj->name being NULL and thus causing a null pointer dereference when trying to copy from it.

This just adds a guard to check that the name is not NULL before copying from it. The server appears to have a similar pattern.

Text from CVE List

Affected versions 6

  • Linuxaffected: 5a93929d9f9a1d82946ddd49e260b6dd1756ad6d before f79cf42ff23f9120246cd6740eaa26f59c632a4aCVE List
  • Linuxaffected: 5a93929d9f9a1d82946ddd49e260b6dd1756ad6d before 99c24a8968ebef0573825b5cb89d5985d51635b9CVE List
  • Linuxaffected: 6.1CVE List
  • Linuxunaffected: all versions before 6.1CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2