RDMA/hfi1: Free RX data on late probe failure (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1_init_dd() allocates the shared AIP/VNIC RX support before returning. If hfi1_init() or hfi1_register_ib_device() later fails, init_one() tears down the device data without calling hfi1_free_rx(). This leaks netdev_rx and its dummy netdev. Free the RX support after IB unregistration and before postinit_cleanup(), as done on normal device removal.
References
- https://git.kernel.org/stable/c/cfad037c6d305876b877abc39fd4d7e2185e44f3
- https://git.kernel.org/stable/c/d1c91cb02e05fdd93411de707cc5c3c08375df9e
- https://git.kernel.org/stable/c/10e5e37495096b58f07adc4020de2701efc3a9e0
- https://git.kernel.org/stable/c/cd06c17afb08b37995f66cf560c2332a769b8f80
- https://git.kernel.org/stable/c/149a14ec70887ad14e820a7ca15738ded3d2d493
- https://git.kernel.org/stable/c/83fe4e4f4fbf01d3832a24511c0ddfaccf5df9d8
- https://git.kernel.org/stable/c/8e17e101e04a3dc062e2719da57ff78c1c060632
European references
- ENISA EUVD · EUVD-2026-82210
- GCVE · GCVE-0-2026-93102
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1372 — Multiples vulnérabilités dans les produits SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1335 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 4730f4a6c6b2065589c0822af00aa45e639bbc36 < cfad037c6d305876b877abc39fd4d7e2185e44f3 ; affected 4730f4a6c6b2065589c0822af00aa45e639bbc36 < d1c91cb02e05fdd93411de707cc5c3c08375df9e ; affected 4730f4a6c6b2065589c0822af00aa45e639bbc36 < 10e5e37495096b58f07adc4020de2701efc3a9e0 ; affected 4730f4a6c6b2065589c0822af00aa45e639bbc36 < cd06c17afb08b37995f66cf560c2332a769b8f80 ; affected 4730f4a6c6b2065589c0822af00aa45e639bbc36 < 149a14ec70887ad14e820a7ca15738ded3d2d493 ; affected 4730f4a6c6b2065589c0822af00aa45e639bbc36 < 83fe4e4f4fbf01d3832a24511c0ddfaccf5df9d8 |
| Linux · Linux | affected 5.8 ; unaffected 0 < 5.8 ; unaffected 5.15.221 ≤ 5.15.* ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* ; unaffected 6.12.110 ≤ 6.12.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |