01 Record

CVE-2026-92509

RDMA/core: Fix potential use after free in counter_release()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

RDMA/core: Fix potential use after free in counter_release()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 6.3% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-17 16:10Z1 MO AGO

Last updated

2026-10-19 09:04Z10 DAYS AGO

Reserved

2026-09-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-825Expired Pointer DereferenceBase
CWE-416Use After FreeVariant

Data version

5.2

Document digest

79355d4126e2da16a30d8f302ed88d5f2402a62c348f82e0c504b4e2ddb6b9fb

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux99fa331dc8629be55ac7a0cca0dc56492070ddac to < 5eb0c57a8b568eb08f464861d84d518a2af939ac, 99fa331dc8629be55ac7a0cca0dc56492070ddac to < d5cc211e8c39e46f357d30a092d683e84d560de9, 99fa331dc8629be55ac7a0cca0dc56492070ddac to < 2f0c6705e26ba92c0c6b0b0908a2d3f35a039d5b, 99fa331dc8629be55ac7a0cca0dc56492070ddac to < 8c013e3a8d8273da4d47bf1c27f016a3551996f5, 99fa331dc8629be55ac7a0cca0dc56492070ddac to < 64c72390d8407ea86de712a477c796b07d37abc4, 99fa331dc8629be55ac7a0cca0dc56492070ddac to < 235ef2d0e750885c29340b0fc40620a7a4f52e12, 5.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5eb0c57a8b568eb08f464861d84d518a2af939ac
git.kernel.orghttps://git.kernel.org/stable/c/d5cc211e8c39e46f357d30a092d683e84d560de9
git.kernel.orghttps://git.kernel.org/stable/c/2f0c6705e26ba92c0c6b0b0908a2d3f35a039d5b
git.kernel.orghttps://git.kernel.org/stable/c/8c013e3a8d8273da4d47bf1c27f016a3551996f5
git.kernel.orghttps://git.kernel.org/stable/c/64c72390d8407ea86de712a477c796b07d37abc4
git.kernel.orghttps://git.kernel.org/stable/c/235ef2d0e750885c29340b0fc40620a7a4f52e12

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.