CVE-2026-97491

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. When tearing down InfiniBand network connection paths, a shutdown worker thread may sleep indefinitely while waiting for pending operations to finish, blocking other work items in the queue. This condition can lead to a thread hang, resulting in a Denial of Service (DoS).

A low impact flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. When an RDS connection over InfiniBand is torn down, the shutdown worker thread can sleep indefinitely in an unconditional wait for pending send and receive operations to complete. Because the worker cannot process other queued work items, teardown of the RDMA network configuration can hang, resulting in a local denial of service. Triggering the flaw requires local access with the ability to initiate the affected connection teardown, and it does not affect confidentiality or integrity. Current Red Hat affectedness records show the supported Red Hat Enterprise Linux, Red Hat In-Vehicle OS, and OpenShift Container Platform RHEL CoreOS streams as not affected because the vulnerable code is not present in their shipped kernels. Although the maximum Red Hat CVSS 3.1 score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) reflects high availability impact, Red Hat rates the overall impact of this flaw as low because it is a local, teardown-specific hang with limited practical actionability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.