CVE-2026-45910
Linux · Kernel
A race condition in the Linux kernel's RDMA/rxe component within the QP timer handler can lead to system instability.
Executive summary
A race condition in the Linux RDMA subsystem could lead to unpredictable system behavior or denial-of-service.
Vulnerability
The vulnerability is a race condition occurring within the QP (Queue Pair) timer handlers in the rdma_rxe driver. This can be triggered by specific timing sequences during RDMA operations, potentially causing internal warnings or kernel panics.
Business impact
This flaw poses a risk to service availability, particularly for high-throughput network environments relying on RDMA. With a CVSS score of 7.8, it is considered high-priority for data centers.
Remediation
Immediate Action: Update the kernel to the latest version to include the fix for the race condition in the RDMA/rxe driver.
Proactive Monitoring: Monitor system logs for warnings related to rxe_task or other RDMA-related kernel warnings.
Compensating Controls: If immediate patching is not possible, avoid using the rdma_rxe software implementation in production environments.
Exploitation status
Public Exploit Available: false
Analyst recommendation
We recommend applying the kernel patch immediately. Race conditions in kernel drivers are often difficult to debug and can lead to non-deterministic system failures; patching is the only reliable mitigation.