CVE-2026-98429

A flaw was found in the Linux kernel's Elastic Fabric Adapter (EFA) driver. This flaw can result in a Denial of Service (DoS) due to improper synchronization between interrupt request (IRQ) handlers and event queue resources during device initialization and teardown. Because interrupts can be serviced before the queue state is fully initialized or after its memory buffer is freed, invalid memory access can occur. A local privileged user could trigger this flaw during device setup or removal to cause a system crash.

This vulnerability is rated as Moderate because exploitation requires local access, specific timing during device initialization or removal, and physical or virtualized Amazon Elastic Fabric Adapter (EFA) hardware. The flaw resides in the efa kernel module, where improper synchronization allows completion interrupt handlers to run against uninitialized or freed event queue buffers. Systems operating without EFA devices attached are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.