CVE-2026-98347

A flaw was found in the Linux kernel's IP over InfiniBand (IPoIB) driver. A local user with administrative privileges can cause a Denial of Service (DoS) by triggering a race condition between interface shutdown and multicast flush operations. This timing conflict leaves the interface marked as active, causing background cleanup tasks to loop indefinitely and leading to a kernel deadlock during device teardown.

This vulnerability is classified as Moderate severity for Red Hat Enterprise Linux because exploitation requires local access, relies on specialized InfiniBand networking environments, and results only in a system hang or denial of service rather than code execution. Systems that do not utilize InfiniBand hardware or IP-over-InfiniBand interfaces are not exposed to this flaw. In addition, successfully causing the deadlock requires precisely timing an interface shutdown during active multicast operations, which substantially limits practical exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.