CVE-2026-92508

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-92508

Key Details

CVE	CVE-2026-92508
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Fix potential use after free in ib_free_cq()

When accessing a CQ via the netlink path the only synchronization

mechanism for the said CQ is rdma_restrack_get().

Currently, rdma_restrack_del() is invoked at the end of

ib_free_cq(), which is too late, since by that point

vendor-specific resources associated with the CQ might already be

freed. This can leave a short window where the CQ remains accessible

through restrack, leading to a potential use-after-free.

Fix this by moving the rdma_restrack_del() call to be before the freeing

of the vendor-specific resources ensuring that the CQ is removed from

restrack before its internal resources are released.

This guarantees that no new users hold references to a CQ that is in

the process of destruction. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-92508
CVE	https://www.cve.org/CVERecord?id=CVE-2026-92508

Source

Reference

NVD

CVE