PT-2026-43765 · Linux+1 · Linux Kernel+1
CVE-2026-45898
·
Published
2026-05-27
·
Updated
2026-07-24
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the RDMA/iwcm component where the work submission logic unconditionally calls
queue work(). Because a free list of struct iwcm work is used, each call to queue work() is treated as unique and queues the work. This leads to a situation where the work handler may process and release an item back to the free list while the workqueue entry is still queued. If that item is subsequently reused via INIT WORK(), it can result in list corruption within the workqueue logic.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Multiple Releases of Same Resource or Handle
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel