---
id: CVE-2026-93103
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/hfi1: Preserve unit 0 on allocation failure

  hfi1_free_devdata() assumes that the device was inserted into the unit
  table and unconditionally erases dd->unit
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/hfi1: Preserve unit 0 on allocation failure

  hfi1_free_devdata() assumes that the device was inserted into the unit
  table and unconditionally erases dd->unit. If x…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 <
    852637d3ee56aed8ea3ee8948eda21eca406c051
  - >-
    Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 <
    3d0e5252b8d0345ef494763ca31e3ddd666e02cb
  - >-
    Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 <
    0feb29d434e6cc0ebefec4f77be014c85ad751b0
  - >-
    Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 <
    3f1e196eb66b8cd3882e373794d6cea46f150a20
  - >-
    Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 <
    4ff9d58d34758e9633078b37e8d5289b513ff80e
  - >-
    Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 <
    fd4d3ad5f244a867166d1e2da7ece3d82878ec81
  - >-
    Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 <
    4204f5c0312ba136181a6e148ffa0bfaf95a4cc1
  - >-
    Linux >= 03b92789e5cfdac66805c1a98f1ec67336199d56 <
    2e3809ad8911f5d5581b3f046bd628417bface76
  - Linux 5.2
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:18:04.607'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93103'
references:
  - url: 'https://git.kernel.org/stable/c/0feb29d434e6cc0ebefec4f77be014c85ad751b0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2e3809ad8911f5d5581b3f046bd628417bface76'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3d0e5252b8d0345ef494763ca31e3ddd666e02cb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3f1e196eb66b8cd3882e373794d6cea46f150a20'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4204f5c0312ba136181a6e148ffa0bfaf95a4cc1'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4ff9d58d34758e9633078b37e8d5289b513ff80e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/852637d3ee56aed8ea3ee8948eda21eca406c051'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fd4d3ad5f244a867166d1e2da7ece3d82878ec81'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.756Z'
epss: 0.00176
epssPercentile: 0.07429
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Preserve unit 0 on allocation failure

hfi1_free_devdata() assumes that the device was inserted into the unit
table and unconditionally erases dd->unit. If xa_alloc_irq() fails, the
zero-initialized unit remains zero, so full cleanup can remove an
unrelated device from index 0.

Release only the rdmavt allocation and return immediately while the unit
table has not acquired the device.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.