CVE-2026-92514

A flaw was found in the Linux kernel. When the RDMA/erdma component's Completion Event Queue (CEQ) tasklet is being removed, it can attempt to access memory that has already been released. This 'use-after-free' vulnerability can lead to memory corruption, which might allow an attacker to cause the system to crash (denial of service) or potentially gain elevated privileges.

This vulnerability is assessed as Moderate severity because it requires local access and is restricted to environments utilizing Alibaba Elastic RDMA (erdma) network adapters, significantly limiting the affected deployment base. The use-after-free condition occurs only during device shutdown or driver uninitialization routines, operations typically initiated by privileged administrators. Default installations without erdma hardware or where the driver module is not loaded remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.