{"id":"AZL-102878","summary":"CVE-2026-90309 affecting package kernel 6.6.150.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/erdma: Hold CQ references when processing EQ events\n\nEQ handlers look up CQs from dev-\u003ecq_xa and invoke CQ completion or\nerror callbacks outside the xarray lock. erdma_destroy_cq() can erase the\nCQ from the xarray and free its queue buffer and doorbell record while a\npreviously scheduled EQ handler is still using the CQ.\n\nAdd a CQ refcount and take a reference under the xarray lock with\nrefcount_inc_not_zero(). Remove the CQ from the xarray before dropping\nthe destroy-path reference, then wait for in-flight EQ users before\nreleasing CQ resources.","modified":"2026-09-18T14:16:35.105729512Z","published":"2026-09-17T17:17:28Z","upstream":["CVE-2026-90309"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90309"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.150.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-102878.json"}}],"schema_version":"1.9.0"}