{"id":"CVE-2026-93103","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Preserve unit 0 on allocation failure\n\nhfi1_free_devdata() assumes that the device was inserted into the unit\ntable and unconditionally erases dd->unit","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Preserve unit 0 on allocation failure\n\nhfi1_free_devdata() assumes that the device was inserted into the unit\ntable and unconditionally erases dd->unit. If x…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 < 852637d3ee56aed8ea3ee8948eda21eca406c051","Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 < 3d0e5252b8d0345ef494763ca31e3ddd666e02cb","Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 < 0feb29d434e6cc0ebefec4f77be014c85ad751b0","Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 < 3f1e196eb66b8cd3882e373794d6cea46f150a20","Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 < 4ff9d58d34758e9633078b37e8d5289b513ff80e","Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 < fd4d3ad5f244a867166d1e2da7ece3d82878ec81","Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 < 4204f5c0312ba136181a6e148ffa0bfaf95a4cc1","Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 < 2e3809ad8911f5d5581b3f046bd628417bface76","Linux 5.2"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:18:04.607","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93103","references":[{"url":"https://git.kernel.org/stable/c/0feb29d434e6cc0ebefec4f77be014c85ad751b0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/2e3809ad8911f5d5581b3f046bd628417bface76","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3d0e5252b8d0345ef494763ca31e3ddd666e02cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3f1e196eb66b8cd3882e373794d6cea46f150a20","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4204f5c0312ba136181a6e148ffa0bfaf95a4cc1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4ff9d58d34758e9633078b37e8d5289b513ff80e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/852637d3ee56aed8ea3ee8948eda21eca406c051","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/fd4d3ad5f244a867166d1e2da7ece3d82878ec81","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.756Z","epss":0.00176,"epssPercentile":0.07425,"slug":"CVE-2026-93103","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Preserve unit 0 on allocation failure\n\nhfi1_free_devdata() assumes that the device was inserted into the unit\ntable and unconditionally erases dd->unit. If xa_alloc_irq() fails, the\nzero-initialized unit remains zero, so full cleanup can remove an\nunrelated device from index 0.\n\nRelease only the rdmavt allocation and return immediately while the unit\ntable has not acquired the device.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}