CVE-2026-89798

A flaw was found in the rpcrdma component of the Linux kernel. A race condition can occur during the registration and removal of Remote Direct Memory Access (RDMA) notifications. If a device removal operation races with a new notification registration, it can lead to a NULL pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because exploitation is constrained to a local denial of service and requires specialized RDMA-capable hardware or kernel configurations. Under default Red Hat Enterprise Linux installations, the rpcrdma module is not loaded unless remote direct memory access transports are explicitly configured for RPC services like NFS. Even in environments utilizing RDMA, triggering the condition requires winning a specific race between hardware device detachment and notification registration, causing an unhandled null pointer exception that terminates the system without compromising data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.