CVE-2026-98353
Last modified
CVE-2026-98353 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an interrupt arrives while the create path holds the plain xa_lock, the lookup spins forever trying to acquire the same lock. Use IRQ-safe XArray helpers for all QP and CQ create-path updates, including the GSI QP store and error paths.
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Locked QP and CQ lookups from EQ interrupts can deadlock with create-path XArray updates. If an interrupt arrives while the create path holds the plain xa_lock, the lookup spins forever trying to acquire the same lock. Use IRQ-safe XArray helpers for all QP and CQ create-path updates, including the GSI QP store and error paths. Initialize both arrays with XA_FLAGS_LOCK_IRQ so sleeping allocations preserve interrupt state.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 4545f355654d044d35a31cd01cc46f491a8a7c36, < 74d4085221a7ec5440996af199ccadfa75b9eb0e; >= 98df2aee1459ee1c62c70cbe9b370d2a532aea36, < 00baeade709fb66da647e8327e8398bb532e30f7; 610ef81797bb4f709e8675c1d8d093bb9ccdcbd8; c0a83f29a24c7e7f8516630848ef6db4c174deed; 05b8ca493dd02319bca93c640b259c2ba51ef321; 1fc9c1933959d2776a1ce7bf424251b8b5b586cd; 6e32f84b63c054e09392153125d7202abab2d14b; ec987c0654651036dad6a42f7fa2a6d7c16a3687; c92686867638cda954fdb2bdbac8a75e3aa6eaae; >= 7.2.6, < 7.2.8; >= 6.1.188, < 6.2; >= 6.6.157, < 6.7; >= 6.12.110, < 6.13; >= 6.18.52, < 6.19 |
| Linux | Linux | 7.3-rc1 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98353?
How severe is CVE-2026-98353?
How do I fix CVE-2026-98353?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98347In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98348In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-98349In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-98350In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98351In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98352In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98354In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98355In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98356In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98357In the Linux kernel, the following vulnerability has been re…8.1
- CVE-2026-98358In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98359In the Linux kernel, the following vulnerability has been re…7
Are you affected by CVE-2026-98353?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST