CVE-2026-89535 Linux kernel CVE debrief

Who should care

Linux kernel administrators and security teams should assess exposure and prioritize verification of affected systems based on their specific kernel versions and configurations. They should also monitor system logs for signs of exploitation and prioritize patching or updating affected systems.

Why it matters

A vulnerability in the Linux kernel's svcrdma has been resolved, and Linux kernel administrators should assess exposure and prioritize verification of affected systems.

• Verification of Linux kernel versions and configurations for potential exposure
• Monitoring system logs for signs of exploitation
• Prioritization of patching or updating affected systems

Technical summary

The vulnerability is caused by the order of operations in svc_rdma_free(), where rpcrdma_rn_unregister() is called after rdma_destroy_id(). This can lead to a use-after-free vulnerability if a concurrent ib_unregister_device walk dispatches svc_rdma_xprt_done() against the now-freed sc_cm_id. The fix involves reordering these operations to prevent such vulnerabilities. Linux kernel administrators should assess exposure and prioritize verification of affected systems based on their specific kernel versions and configurations.

Defensive priority

Linux kernel administrators should assess exposure and prioritize verification of affected systems.

Recommended defensive actions

• Review Linux kernel versions and configurations for potential exposure
• Verify system logs for signs of exploitation
• Apply patches or updates as available
• Monitor system logs for signs of exploitation
• Prioritize patching or updating affected systems
• Review compensating controls for exposed systems
• Track exceptions and retest remediated assets

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but the scope of affected systems and versions is not explicitly stated. Linux kernel administrators should verify the presence of the patch and assess exposure based on their specific kernel versions and configurations. The vulnerability details indicate that the fix involves reordering operations in svc_rdma_free() to prevent use-after-free vulnerabilities.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.