RDMA/efa: Keep EQ resources alive while IRQ is registered (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ handler accesses the EQ state and DMA buffer. Its IRQ was registered before that state was initialized, while teardown released the buffer before free_irq() synchronized the handler. Initialize the EQ without arming it, register the IRQ, and then arm it. Reverse the resource order during teardown by freeing the IRQ before destroying the EQ.
References
- https://git.kernel.org/stable/c/3cd652dfcd822af26ba75d6d2d245ea7f73b499e
- https://git.kernel.org/stable/c/c767e2812cac83fef70fb8932c3f0fe97dff9388
- https://git.kernel.org/stable/c/795eb34bfd8b1ab347adc41a11e4bb97c3ac0ce6
- https://git.kernel.org/stable/c/38871ff47e2a02f8d9a333a65f358d987247b5b0
- https://git.kernel.org/stable/c/9ecd3dcbdf1f315aadc049b291f59c79dc478062
- https://git.kernel.org/stable/c/e22a3627b7151754f07f90ea3d1ab6e85f5d93f4
European references
- ENISA EUVD · EUVD-2026-101078
- GCVE · GCVE-0-2026-98429
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1374 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 2a152512a155aaf27c3e67834ffafaed9525a7b5 < 3cd652dfcd822af26ba75d6d2d245ea7f73b499e ; affected 2a152512a155aaf27c3e67834ffafaed9525a7b5 < c767e2812cac83fef70fb8932c3f0fe97dff9388 ; affected 2a152512a155aaf27c3e67834ffafaed9525a7b5 < 795eb34bfd8b1ab347adc41a11e4bb97c3ac0ce6 ; affected 2a152512a155aaf27c3e67834ffafaed9525a7b5 < 38871ff47e2a02f8d9a333a65f358d987247b5b0 ; affected 2a152512a155aaf27c3e67834ffafaed9525a7b5 < 9ecd3dcbdf1f315aadc049b291f59c79dc478062 ; affected 2a152512a155aaf27c3e67834ffafaed9525a7b5 < e22a3627b7151754f07f90ea3d1ab6e85f5d93f4 |
| Linux · Linux | affected 5.16 ; unaffected 0 < 5.16 ; unaffected 6.1.189 ≤ 6.1.* ; unaffected 6.6.158 ≤ 6.6.* ; unaffected 6.12.112 ≤ 6.12.* ; unaffected 6.18.54 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |