UBUNTU-CVE-2026-92488: High severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: complete object teardown when the destroy command fails erdmadestroyqp(), erdmadestroycq(), erdmaderegmr(), and erdmadestroyah() returned early when erdmapostcmdwait() failed, leaking the queue buffers, MTTs, doorbells and the STAG, QPN, CQN and AHN identifiers. A command timeout clears ERDMACMDQSTATEOKBIT and permanently disables the command queue, so no retry can succeed; the RDMA core keeps the object after a failed destructor and forced uverbs cleanup then nulls the pointers, making the resources unreachable. Warn on failure but release every software-owned resource and return success, since during terminal destruction the hardware command result is only diagnostic.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Update ERDMA teardown handling so erdma_destroy_qp(), erdma_destroy_cq(), erdma_dereg_mr(), and erdma_destroy_ah() warn when erdma_post_cmd_wait() fails but still release all software-owned resources, including queue buffers, MTTs, doorbells, and STAG, QPN, CQN, and AHN identifiers, and return success during terminal destruction.