CVE-2026-93103

CVE-2026-93103

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Preserve unit 0 on allocation failure

hfi1_free_devdata() assumes that the device was inserted into the unit

table and unconditionally erases dd->unit. If xa_alloc_irq() fails, the

zero-initialized unit remains zero, so full cleanup can remove an

unrelated device from index 0.

Release only the rdmavt allocation and return immediately while the unit

table has not acquired the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2026-09-17T21:18Z
References (8)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:11Z
    RDMA/hfi1: Preserve unit 0 on allocation failure
    cvelistv5