CVE-2026-93102
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1_init_dd() allocates the shared AIP/VNIC RX support before returning. If hfi1_init() or hfi1_register_ib_device() later fails, init_one() tears down the device data without calling hfi1_free_rx(). This leaks netdev_rx and its dummy netdev. Free the RX support after IB unregistration and before postinit_cleanup(), as done on normal device removal.
How to fix
- Linux Linuxcfad037c6d305876b877abc39fd4d7e2185e44f3, d1c91cb02e05fdd93411de707cc5c3c08375df9e, 10e5e37495096b58f07adc4020de2701efc3a9e0, cd06c17afb08b37995f66cf560c2332a769b8f80, 149a14ec70887ad14e820a7ca15738ded3d2d493, 83fe4e4f4fbf01d3832a24511c0ddfaccf5df9d8, 8e17e101e04a3dc062e2719da57ff78c1c060632 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4730f4a6c6b2065589c0822af00aa45e639bbc36 ≤ v < cfad037c6d305876b877abc39fd4d7e2185e44f3, 4730f4a6c6b2065589c0822af00aa45e639bbc36 ≤ v < d1c91cb02e05fdd93411de707cc5c3c08375df9e, 4730f4a6c6b2065589c0822af00aa45e639bbc36 ≤ v < 10e5e37495096b58f07adc4020de2701efc3a9e0, 4730f4a6c6b2065589c0822af00aa45e639bbc36 ≤ v < cd06c17afb08b37995f66cf560c2332a769b8f80, 4730f4a6c6b2065589c0822af00aa45e639bbc36 ≤ v < 149a14ec70887ad14e820a7ca15738ded3d2d493, 4730f4a6c6b2065589c0822af00aa45e639bbc36 ≤ v < 83fe4e4f4fbf01d3832a24511c0ddfaccf5df9d8, 4730f4a6c6b2065589c0822af00aa45e639bbc36 ≤ v < 8e17e101e04a3dc062e2719da57ff78c1c060632, 5.8 | cfad037c6d305876b877abc39fd4d7e2185e44f3, d1c91cb02e05fdd93411de707cc5c3c08375df9e, 10e5e37495096b58f07adc4020de2701efc3a9e0, cd06c17afb08b37995f66cf560c2332a769b8f80, 149a14ec70887ad14e820a7ca15738ded3d2d493, 83fe4e4f4fbf01d3832a24511c0ddfaccf5df9d8, 8e17e101e04a3dc062e2719da57ff78c1c060632 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.