CVE-2026-89505

A flaw was found in the Linux kernel's RDMA/uverbs component. Malformed input from a provider in the legacy write path can cause the uverbs_get_handler_fn() function to dereference an uninitialized pointer. This can lead to a system crash, resulting in a denial of service.

This flaw is rated as having an Important impact because a local user with access to RDMA device interfaces could supply crafted inputs to trigger an uninitialized pointer dereference in kernel space, potentially leading to a kernel crash or privilege escalation. However, Red Hat Enterprise Linux and associated products are not affected by this vulnerability, as the affected legacy write handling logic was introduced in upstream kernel releases not included in any supported Red Hat kernel.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.