CVE-2026-98366

A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) software driver. A local user can exploit this vulnerability to cause a Denial of Service (DoS) or potentially gain elevated privileges by triggering a use-after-free memory flaw. This issue occurs because the driver updates internal memory assignments before validating user-supplied access flags during memory re-registration. When an invalid request is rejected, the driver fails to roll back the assignment, leading to corrupted reference counts and memory access after it has been freed.

This vulnerability is rated as Moderate severity because it requires local access to an RDMA interface using the Soft-RoCE driver, which is neither loaded nor configured by default in standard Red Hat Enterprise Linux installations. Exploitation requires specific user-space interaction with active RDMA verbs interfaces during memory re-registration, restricting exposure to systems actively utilizing software RoCE. While memory corruption could trigger a kernel crash or potential privilege escalation, the requirement for local access combined with non-default subsystem usage prevents broad exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.