Bug 2536204 (CVE-2026-93102) - CVE-2026-93102 kernel: RDMA/hfi1: Free RX data on late probe failure
Summary: CVE-2026-93102 kernel: RDMA/hfi1: Free RX data on late probe failure
Keywords:
Status: NEW
Alias: CVE-2026-93102
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-17 16:50 UTC by OSIDB Bzimport
Modified: 2026-10-05 18:52 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-17 16:50:38 UTC 
In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Free RX data on late probe failure

hfi1_init_dd() allocates the shared AIP/VNIC RX support before returning.
If hfi1_init() or hfi1_register_ib_device() later fails, init_one() tears
down the device data without calling hfi1_free_rx(). This leaks netdev_rx
and its dummy netdev.

Free the RX support after IB unregistration and before postinit_cleanup(),
as done on normal device removal.
Comment 1 gkamathe 2026-09-19 14:57:32 UTC 
Upstream advisory:
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93102.mbox
Note You need to log in before you can comment on or make changes to this bug.