CVE-2026-98430

CVE-2026-98430

published October 14, 2026

CVSS
—
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/efa: Keep admin queues alive while IRQ is registered

The management IRQ handler accesses both the admin completion queue and the

async event queue. The driver registered the IRQ before constructing these

queues and destroyed them before freeing the IRQ, so the handler's lifetime

was not contained by the resources it accesses.

Initialize the queues with interrupts masked, request the IRQ, and then

switch to interrupt mode. On removal, reset the device and free the IRQ

before destroying the queues. Also reset the device before destroying the

queues if IRQ registration fails, because the device already has their DMA

addresses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Published
2026-10-14T18:17Z
References (6)
EPSS history
Timeline
  • 16 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 14 OCT 13:27Z
    RDMA/efa: Keep admin queues alive while IRQ is registered
    cvelistv5
  • 14 OCT 13:27Z
    RDMA/efa: Keep admin queues alive while IRQ is registered
    cvelistv5