UnratedFix available
RDMA/hfi1: Preserve unit 0 on allocation failure
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Preserve unit 0 on allocation failure hfi1_free_devdata() assumes that the device was inserted into the unit table and unconditionally erases dd->unit. If xa_alloc_irq() fails, the zero-initialized unit remains zero, so full cleanup can remove an unrelated device from index 0. Release only the rdmavt allocation and return immediately while the unit table has not acquired the device.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.270, 5.15.221, 6.1.188, 6.12.110, 6.18.52, 6.6.157, 7.2.6
- CVEs
- CVE-2026-93103
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 19:46 UTC · Revision 1
Source evidence
RDMA/hfi1: Preserve unit 0 on allocation failure
core-osv · Original sourcePublished 17 Sept 2026, 16:11 UTC
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Preserve unit 0 on allocation failure hfi1_free_devdata() assumes that the device was inserted into the unit table and unconditionally erases dd->unit. If xa_alloc_irq() fails, the zero-initialized unit remains zero, so full cleanup can remove an unrelated device from index 0. Release only the rdmavt allocation and return immediately while the unit table has not acquired the device.
osv:CVE-2026-93103
Kernel
Fixed versions: 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.110, 6.18.52, 7.2.6
Complete source record
{
"id": "c2f2f7f05583807bbd2e0e3a3b4e3cec62cec05b597d3b13dbfdbb043d4f1120",
"url": "https://osv.dev/vulnerability/CVE-2026-93103",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "RDMA/hfi1: Preserve unit 0 on allocation failure",
"summary": "In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Preserve unit 0 on allocation failure hfi1_free_devdata() assumes that the device was inserted into the unit table and unconditionally erases dd->unit. If xa_alloc_irq() fails, the zero-initialized unit remains zero, so full cleanup can remove an unrelated device from index 0. Release only the rdmavt allocation and return immediately while the unit table has not acquired the device.",
"evidence": "osv:CVE-2026-93103",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.270",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.221",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.188",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.157",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.110",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.52",
"evidence": "/affected/1/ranges"
},
{
"value": "7.2.6",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-93103",
"aliases": [
"CVE-2026-93103"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "03b92789e5cfdac66805c1a98f1ec67336199d56"
},
{
"fixed": "852637d3ee56aed8ea3ee8948eda21eca406c051"
},
{
"fixed": "3d0e5252b8d0345ef494763ca31e3ddd666e02cb"
},
{
"fixed": "0feb29d434e6cc0ebefec4f77be014c85ad751b0"
},
{
"fixed": "3f1e196eb66b8cd3882e373794d6cea46f150a20"
},
{
"fixed": "4ff9d58d34758e9633078b37e8d5289b513ff80e"
},
{
"fixed": "fd4d3ad5f244a867166d1e2da7ece3d82878ec81"
},
{
"fixed": "4204f5c0312ba136181a6e148ffa0bfaf95a4cc1"
},
{
"fixed": "2e3809ad8911f5d5581b3f046bd628417bface76"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93103.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.2.0"
},
{
"fixed": "5.10.270"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.221"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.188"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.157"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.110"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.52"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.2.6"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93103.json"
}
}
],
"modified": "2026-10-28T02:30:23.004138884Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/0feb29d434e6cc0ebefec4f77be014c85ad751b0",
"https://git.kernel.org/stable/c/2e3809ad8911f5d5581b3f046bd628417bface76",
"https://git.kernel.org/stable/c/3d0e5252b8d0345ef494763ca31e3ddd666e02cb",
"https://git.kernel.org/stable/c/3f1e196eb66b8cd3882e373794d6cea46f150a20",
"https://git.kernel.org/stable/c/4204f5c0312ba136181a6e148ffa0bfaf95a4cc1",
"https://git.kernel.org/stable/c/4ff9d58d34758e9633078b37e8d5289b513ff80e",
"https://git.kernel.org/stable/c/852637d3ee56aed8ea3ee8948eda21eca406c051",
"https://git.kernel.org/stable/c/fd4d3ad5f244a867166d1e2da7ece3d82878ec81",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93103.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-93103",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93103.json"
}
},
"related_cves": [
{
"value": "CVE-2026-93103",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 489347,
"published_at": "2026-09-17T16:11:15.105+00:00"
}