---
id: CVE-2026-93153
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/bng_re: return a timeout when firmware responses stall

  __wait_for_resp() documents that it returns a non-zero error when a
  firmware command does not complete, and…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/bng_re: return a timeout when firmware responses stall

  __wait_for_resp() documents that it returns a non-zero error when a
  firmware command does not complete, and…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 53c6ee7d7f68a0679f8ddc703338aa2550d24a17 <
    02d4ee65dc2e883f554169155937742e6014c243
  - >-
    Linux >= 53c6ee7d7f68a0679f8ddc703338aa2550d24a17 <
    5f9576c6734abca88a02db72c466e09d2eddf160
  - Linux 6.19
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:18:10.607'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93153'
references:
  - url: 'https://git.kernel.org/stable/c/02d4ee65dc2e883f554169155937742e6014c243'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5f9576c6734abca88a02db72c466e09d2eddf160'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.740Z'
epss: 0.00189
epssPercentile: 0.08853
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bng_re: return a timeout when firmware responses stall

__wait_for_resp() documents that it returns a non-zero error when a
firmware command does not complete, and bng_re_rcfw_send_message() already
marks the firmware as stalled when the helper returns -ENODEV.

However, the helper ignores wait_event_timeout() expiry.  If the response
slot remains in use after the timeout and after the polled CREQ service
attempt, the loop starts another full timeout period and can repeat
forever.

Return -ENODEV after a timed out wait that still has no response.  The
existing caller then marks FIRMWARE_STALL_DETECTED and returns
-ETIMEDOUT to the command issuer.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.