CVE-2026-89509

A flaw was found in the Linux kernel's RDMA/ionic driver. This vulnerability arises from the driver's incorrect handling of rdma_counter allocations, specifically by not embedding counter driver data as required. This oversight can lead to a NULL pointer dereference when the alloc_and_bind() function is called. A local attacker could potentially trigger this flaw, causing the system to crash and resulting in a Denial of Service (DoS).

Red Hat has evaluated this issue as having an Important severity rating because an authenticated local user could trigger an unhandled kernel crash and complete denial of service. However, supported Red Hat Enterprise Linux releases do not ship the affected ionic RDMA driver code and are not impacted. Exploitation upstream also relies on the presence of physical or virtualized Pensando adapter hardware on the target host.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.