CVE-2026-93102

CVE-2026-93102

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Free RX data on late probe failure

hfi1_init_dd() allocates the shared AIP/VNIC RX support before returning.

If hfi1_init() or hfi1_register_ib_device() later fails, init_one() tears

down the device data without calling hfi1_free_rx(). This leaks netdev_rx

and its dummy netdev.

Free the RX support after IB unregistration and before postinit_cleanup(),

as done on normal device removal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-09-17T21:18Z
References (7)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:11Z
    RDMA/hfi1: Free RX data on late probe failure
    cvelistv5