CVE-2026-89531
Received Received - Intake

svcrdma Connection Rejection on Transport Allocation Failure

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handle_connect_req() returns without action when svc_rdma_create_xprt() fails to allocate the new transport. The CM core returns 0 for CONNECT_REQUEST events, so it does not destroy the new rdma_cm_id. Each allocation failure under memory pressure leaks one rdma_cm_id, and a remote peer driving connection attempts can amplify this. Reject the connection by returning a non-zero status from the CM event handler, which tells the CM core to destroy the orphaned cm_id.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-12
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-89531
EUVD
EUVD-2026-76437

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where connection requests are not properly rejected when transport allocation fails. This leads to memory leaks as orphaned rdma_cm_id objects accumulate under memory pressure. A remote attacker could exploit this by repeatedly attempting connections to deplete system resources.

Detection Guidance

This vulnerability involves memory pressure causing transport allocation failures in the Linux kernel's svcrdma module. Detection requires monitoring for failed connection attempts or memory allocation errors in kernel logs. Check for repeated 'svc_rdma_create_xprt' failures or 'rdma_cm_id' leaks using commands like 'dmesg | grep svcrdma' or 'journalctl -k | grep -i rdma'.

Impact Analysis

An attacker could cause system instability or denial of service by triggering repeated connection attempts. This may lead to resource exhaustion, crashes, or degraded performance on affected systems using the Linux kernel with svcrdma functionality.

Mitigation Strategies

Apply the latest Linux kernel patches to resolve the issue. Monitor system memory usage to prevent pressure that triggers the vulnerability. Restrict remote peers' connection attempts if possible. Ensure sufficient memory is allocated for kernel operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-89531. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart