CVE-2026-89508

A flaw was found in the Linux kernel's RDMA/ucma component. A race condition exists in the ucma_set_ib_path() function when handling events concurrently with ucma_migrate_id(). This can allow a local attacker with access to an RDMA device to trigger a use-after-free vulnerability, potentially leading to system instability or a denial of service.

This vulnerability is rated as an Important severity flaw because an unprivileged local user could leverage concurrent operations to induce memory corruption in kernel space, potentially achieving arbitrary code execution or causing a system crash. The flaw is contained within the kernel Remote Direct Memory Access (RDMA) user connection management subsystem. Exploitation requires the host to have active RDMA hardware present and configured with an address-resolved connection identifier, which is atypical for general-purpose server environments. Consequently, systems without specialized RDMA devices or InfiniBand configurations are not exposed to this issue during standard operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.