CVE-2026-45910

Linux · Kernel

A race condition in the Linux kernel's RDMA/rxe component within the QP timer handler can lead to system instability.

Executive summary

A race condition in the Linux RDMA subsystem could lead to unpredictable system behavior or denial-of-service.

Vulnerability

The vulnerability is a race condition occurring within the QP (Queue Pair) timer handlers in the rdma_rxe driver. This can be triggered by specific timing sequences during RDMA operations, potentially causing internal warnings or kernel panics.

Business impact

This flaw poses a risk to service availability, particularly for high-throughput network environments relying on RDMA. With a CVSS score of 7.8, it is considered high-priority for data centers.

Remediation

Immediate Action: Update the kernel to the latest version to include the fix for the race condition in the RDMA/rxe driver.

Proactive Monitoring: Monitor system logs for warnings related to rxe_task or other RDMA-related kernel warnings.

Compensating Controls: If immediate patching is not possible, avoid using the rdma_rxe software implementation in production environments.

Exploitation status

Public Exploit Available: false

Analyst recommendation

We recommend applying the kernel patch immediately. Race conditions in kernel drivers are often difficult to debug and can lead to non-deterministic system failures; patching is the only reliable mitigation.