CVE-2026-89531
Last modified
CVE-2026-89531 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handle_connect_req() returns without action when svc_rdma_create_xprt() fails to allocate the new transport. The CM core returns 0 for CONNECT_REQUEST events, so it does not destroy the new rdma_cm_id. Each allocation failure under memory pressure leaks one rdma_cm_id, and a remote peer driving connection attempts can amplify this. Reject the connection by returning a non-zero status from the CM event handler, which tells the CM core to destroy the orphaned cm_id..
Description
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handle_connect_req() returns without action when svc_rdma_create_xprt() fails to allocate the new transport. The CM core returns 0 for CONNECT_REQUEST events, so it does not destroy the new rdma_cm_id. Each allocation failure under memory pressure leaks one rdma_cm_id, and a remote peer driving connection attempts can amplify this. Reject the connection by returning a non-zero status from the CM event handler, which tells the CM core to destroy the orphaned cm_id.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 377f9b2f4529e0ac702fd7b91e216afd0adc959e, < 6e21754bbf75075f3fee1cebc79f3417364235ec; >= 377f9b2f4529e0ac702fd7b91e216afd0adc959e, < 3cf372cec7ab2cd8c6002bf775cc14d90ccb098b; >= 377f9b2f4529e0ac702fd7b91e216afd0adc959e, < 1f6a14c142fee4778c32709d1d54595c2e2b7991; >= 377f9b2f4529e0ac702fd7b91e216afd0adc959e, < 0944462247dcb7de7622cdaaadf5f05c52707dab |
| Linux | Linux | 2.6.25 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-89531?
How severe is CVE-2026-89531?
How do I fix CVE-2026-89531?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-89526In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-89527In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89528In the Linux kernel, the following vulnerability has been re…7.5
- CVE-2026-89529In the Linux kernel, the following vulnerability has been re…
- CVE-2026-8953Sandbox escape due to use-after-free in the Disability Acces…9.6
- CVE-2026-89530In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-89532In the Linux kernel, the following vulnerability has been re…9.1
- CVE-2026-89533In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-89534In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-89535In the Linux kernel, the following vulnerability has been re…8.1
- CVE-2026-89536In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-89537In the Linux kernel, the following vulnerability has been re…9.1
Are you affected by CVE-2026-89531?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST