CVE-2026-93102
Published Sep 17, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1_init_dd() allocates the shared AIP/VNIC RX support before returning. If hfi1_init() or hfi1_register_ib_device() later fails, init_one() tears down the device data without calling hfi1_free_rx(). This leaks netdev_rx and its dummy netdev. Free the RX support after IB unregistration and before postinit_cleanup(), as done on normal device removal.
Is your site exposed to CVE-2026-93102?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/10e5e37495096b58f07adc4020de2701efc3a9e0
https://git.kernel.org/stable/c/149a14ec70887ad14e820a7ca15738ded3d2d493
https://git.kernel.org/stable/c/83fe4e4f4fbf01d3832a24511c0ddfaccf5df9d8
https://git.kernel.org/stable/c/8e17e101e04a3dc062e2719da57ff78c1c060632
https://git.kernel.org/stable/c/cd06c17afb08b37995f66cf560c2332a769b8f80
https://git.kernel.org/stable/c/cfad037c6d305876b877abc39fd4d7e2185e44f3
https://git.kernel.org/stable/c/d1c91cb02e05fdd93411de707cc5c3c08375df9e
Frequently Asked Questions
What is CVE-2026-93102? +
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: Free RX data on late probe failure
hfi1_init_dd() allocates the shared AIP/VNIC RX support before returning.
If hfi1_init() or hfi1_register_ib_device() later fails, init_one() tears
down the device data without calling hfi1_free_rx(). This leaks netdev_rx
and its dummy netdev.
Free the RX support after IB unregistration and before postinit_cleanup(),
as done on normal device removal.
How do I check if I'm vulnerable to CVE-2026-93102? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.