CVE-2026-98353

RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

State: Published
Severity: Not scored
Published: Oct 6, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an interrupt arrives while the create path holds the plain xa_lock, the lookup spins forever trying to acquire the same lock.

Use IRQ-safe XArray helpers for all QP and CQ create-path updates, including the GSI QP store and error paths. Initialize both arrays with XA_FLAGS_LOCK_IRQ so sleeping allocations preserve interrupt state.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1fc9c1933959d2776a1ce7bf424251b8b5b586cd to before e32aa1d85126e6d5ef6efd594ced3f75178886ceAffected 4545f355654d044d35a31cd01cc46f491a8a7c36 to before 74d4085221a7ec5440996af199ccadfa75b9eb0eAffected 98df2aee1459ee1c62c70cbe9b370d2a532aea36 to before 00baeade709fb66da647e8327e8398bb532e30f7Affected 610ef81797bb4f709e8675c1d8d093bb9ccdcbd8Affected c0a83f29a24c7e7f8516630848ef6db4c174deedAffected 05b8ca493dd02319bca93c640b259c2ba51ef321Affected 92101d7bd67cf313d65baede27118614a283f6bfAffected 233f1b7fe2980e4e238fe03dd3ceddfd082cb4c8Affected 6e32f84b63c054e09392153125d7202abab2d14bAffected ec987c0654651036dad6a42f7fa2a6d7c16a3687Affected c92686867638cda954fdb2bdbac8a75e3aa6eaaeAffected 6.1.188 to before 6.2Affected 6.6.157 to before 6.7Affected 6.12.110 to before 6.13Affected 6.1.191 to before 6.2Affected 6.6.160 to before 6.7Affected
LinuxLinux	6.18.52 to before 6.18.58Affected 7.2.6 to before 7.2.8Affected

Product

Versions

LinuxLinux

1fc9c1933959d2776a1ce7bf424251b8b5b586cd to before e32aa1d85126e6d5ef6efd594ced3f75178886ceAffected
4545f355654d044d35a31cd01cc46f491a8a7c36 to before 74d4085221a7ec5440996af199ccadfa75b9eb0eAffected
98df2aee1459ee1c62c70cbe9b370d2a532aea36 to before 00baeade709fb66da647e8327e8398bb532e30f7Affected
610ef81797bb4f709e8675c1d8d093bb9ccdcbd8Affected
c0a83f29a24c7e7f8516630848ef6db4c174deedAffected
05b8ca493dd02319bca93c640b259c2ba51ef321Affected
92101d7bd67cf313d65baede27118614a283f6bfAffected
233f1b7fe2980e4e238fe03dd3ceddfd082cb4c8Affected
6e32f84b63c054e09392153125d7202abab2d14bAffected
ec987c0654651036dad6a42f7fa2a6d7c16a3687Affected
c92686867638cda954fdb2bdbac8a75e3aa6eaaeAffected
6.1.188 to before 6.2Affected
6.6.157 to before 6.7Affected
6.12.110 to before 6.13Affected
6.1.191 to before 6.2Affected
6.6.160 to before 6.7Affected

LinuxLinux

6.18.52 to before 6.18.58Affected
7.2.6 to before 7.2.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.