AZL-111377: CVE-2026-99212 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved:

net/rds: don't let the rdmacm destroy an id RDS still owns on route failure

rdsrdmacmeventhandlercmn() hands the return value of rdmaresolveroute() straight back to the rdmacm on RDMACMEVENTADDRRESOLVED. A synchronous failure there - -ENOMEM from the route work allocation, an SA query that cannot be set up, a RoCE route with no usable device - makes addrhandler() destroy the id the event was delivered on. That id is ic->icmid, and nothing clears the pointer: the connection sits in RDSCONNCONNECTING with a freed id until its shutdown calls rdmadisconnect() and rdmadestroyid() on it.

The ROUTERESOLVED case already avoids this: rdsibcminitiateconnect() forces a zero return while ic->icmid == cmid, as the comment there explains. Do the same here - drop the connection and return 0 - so the id stays RDS's to destroy from the shutdown, and the reconnect gets a fresh one.