CVE-2026-93102

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1_init_dd() allocates the shared AIP/VNIC RX support before returning. If hfi1_init() or hfi1_register_ib_device() later fails, init_one() tears down the device data without calling hfi1_free_rx(). This leaks netdev_rx and its dummy netdev. Free the RX support after IB unregistration and before postinit_cleanup(), as done on normal device removal.

Is your site exposed to CVE-2026-93102?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0017

Probability of exploitation

0.06%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/10e5e37495096b58f07adc4020de2701efc3a9e0 https://git.kernel.org/stable/c/149a14ec70887ad14e820a7ca15738ded3d2d493 https://git.kernel.org/stable/c/83fe4e4f4fbf01d3832a24511c0ddfaccf5df9d8 https://git.kernel.org/stable/c/8e17e101e04a3dc062e2719da57ff78c1c060632 https://git.kernel.org/stable/c/cd06c17afb08b37995f66cf560c2332a769b8f80 https://git.kernel.org/stable/c/cfad037c6d305876b877abc39fd4d7e2185e44f3 https://git.kernel.org/stable/c/d1c91cb02e05fdd93411de707cc5c3c08375df9e

Frequently Asked Questions

What is CVE-2026-93102? +

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1_init_dd() allocates the shared AIP/VNIC RX support before returning. If hfi1_init() or hfi1_register_ib_device() later fails, init_one() tears down the device data without calling hfi1_free_rx(). This leaks netdev_rx and its dummy netdev. Free the RX support after IB unregistration and before postinit_cleanup(), as done on normal device removal.

How do I check if I'm vulnerable to CVE-2026-93102? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.