CVE-2026-98352: Linux kernel · RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in bf88ac4867050112a6c819c8d1a7209bf48ef427 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 14:05 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in bf88ac4867050112a6c819c8d1a7209bf48ef427, a82cca40139d9fcae8208901856bd5bb4051f097, 31024e158b45358370a0a14ed96589e6aa62d6cb +4
Exploitation evidence
Disclosed: evidence found.
CVE published 6 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in multiple Linux kernel commits. Users should update to a fixed Linux kernel version that includes these patches to resolve the CQ pool leak issue. No additional mitigation is required beyond applying the official fix.
Description
A vulnerability in the Linux kernel's RDMA RTRS client component causes a completion queue (CQ) pool leak when a connection attempt is interrupted. This occurs due to improper handling of CQ credits during connection teardown, leading to resource leaks and potential kernel warnings during device unregister.
References
- git.kernel.org/stable/c/a82cca40139d9fcae8208901856bd5bb4051f097 (opens in a new tab)
- git.kernel.org/stable/c/74c4ed55e61f1b65ddbebc5b635d136461a1c3da (opens in a new tab)
- git.kernel.org/stable/c/6f8020fe7465f49e234a576c04e415e9d08c7878 (opens in a new tab)
- git.kernel.org/stable/c/31024e158b45358370a0a14ed96589e6aa62d6cb (opens in a new tab)
- git.kernel.org/stable/c/8f253d5893f991742464b9e7203c43fc08d0aa11 (opens in a new tab)
- git.kernel.org/stable/c/bf88ac4867050112a6c819c8d1a7209bf48ef427 (opens in a new tab)
- git.kernel.org/stable/c/2ae16aaa78b5edc6e6d0904c84fd9cdfb762bcda (opens in a new tab)