CVE-2026-98353

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an interrupt arrives while the create path holds the plain xa_lock, the lookup spins forever trying to acquire the same lock. Use IRQ-safe XArray helpers for all QP and CQ create-path updates, including the GSI QP store and error paths. Initialize both arrays with XA_FLAGS_LOCK_IRQ so sleeping allocations preserve interrupt state.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 6, 2026
First seenOct 6, 2026

How to fix

Update
  • Linux Linuxe32aa1d85126e6d5ef6efd594ced3f75178886ce, 74d4085221a7ec5440996af199ccadfa75b9eb0e, 00baeade709fb66da647e8327e8398bb532e30f7, 6.2, 6.7, 6.13, 6.18.58, 7.2.8 or later

Affected products

ProductAffected versionsFixed in
Linux Linux1fc9c1933959d2776a1ce7bf424251b8b5b586cd ≤ v < e32aa1d85126e6d5ef6efd594ced3f75178886ce, 4545f355654d044d35a31cd01cc46f491a8a7c36 ≤ v < 74d4085221a7ec5440996af199ccadfa75b9eb0e, 98df2aee1459ee1c62c70cbe9b370d2a532aea36 ≤ v < 00baeade709fb66da647e8327e8398bb532e30f7, 610ef81797bb4f709e8675c1d8d093bb9ccdcbd8, c0a83f29a24c7e7f8516630848ef6db4c174deed, 05b8ca493dd02319bca93c640b259c2ba51ef321, 92101d7bd67cf313d65baede27118614a283f6bf, 233f1b7fe2980e4e238fe03dd3ceddfd082cb4c8, 6e32f84b63c054e09392153125d7202abab2d14b, ec987c0654651036dad6a42f7fa2a6d7c16a3687, c92686867638cda954fdb2bdbac8a75e3aa6eaae, 6.1.188 ≤ v < 6.2, 6.6.157 ≤ v < 6.7, 6.12.110 ≤ v < 6.13, 6.1.191 ≤ v < 6.2, 6.6.160 ≤ v < 6.7, 6.18.52 ≤ v < 6.18.58, 7.2.6 ≤ v < 7.2.8e32aa1d85126e6d5ef6efd594ced3f75178886ce, 74d4085221a7ec5440996af199ccadfa75b9eb0e, 00baeade709fb66da647e8327e8398bb532e30f7, 6.2, 6.7, 6.13, 6.18.58, 7.2.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-98353 · Linux · Dark Radar