CVE-2026-64033
kernel: RDMA/rtrs: Fix use-after-free in path file creation cleanup
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) subsystem, specifically within the rtrs module. An incorrect cleanup sequence during path file creation can lead to a use-after-free vulnerability. This issue occurs when an object is deallocated prematurely, and subsequent operations attempt to access the freed memory, which may result in a system crash (denial of service) or potentially lead to arbitrary code execution.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference