CVE-2026-92488

CVE CVE-2026-92488EUVD EUVD-2026-82109Published 2026-09-17T16:10:02.000ZLast changed 2026-09-18T17:55:26.000ZCVSS 7.0

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: complete object teardown when the destroy command fails erdma_destroy_qp(), erdma_destroy_cq(), erdma_dereg_mr(), and erdma_destroy_ah() returned early when erdma_post_cmd_wait() failed, leaking the queue buffers, MTTs, doorbells and the STAG, QPN, CQN and AHN identifiers. A command timeout clears ERDMA_CMDQ_STATE_OK_BIT and permanently disables the command queue, so no retry can succeed; the RDMA core keeps the object after a failed destructor and forced uverbs cleanup then nulls the pointers, making the resources unreachable. Warn on failure but release every software-owned resource and return success, since during terminal destruction the hardware command result is only diagnostic.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux patch: 7.3-rc1; 155055771704f8cbb5c176a4309b7dc30a50450c <ce7d205c264665517c25e8a3231cf2d0c2443e3c; patch: 6.18.52; patch: 7.2.6; patch: 6.12.110; 6.0; 155055771704f8cbb5c176a4309b7dc30a50450c <334145d683ad3e31d052247f10807f2ebc950351; 155055771704f8cbb5c176a4309b7dc30a50450c <652befcba956ef357f480525ccbe25c59bc81d4d; patch: 0; 155055771704f8cbb5c176a4309b7dc30a50450c <5fcfc988ecf3e2bbe308b95c2c0d2f011d9afabe

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.