CVE-2026-93037

RDMA/hfi1: Propagate sdma_txinit_ahg() errors

State: Published
Severity: 7.8 High
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Propagate sdma_txinit_ahg() errors

set_txreq_header_ahg() ignores the return value of sdma_txinit_ahg().

If sdma_txinit_ahg() fails, it returns before initializing tx->txreq. However, set_txreq_header_ahg() ignores the error and returns the AHG change count, causing the caller to continue processing the request as though initialization had succeeded.

Propagate sdma_txinit_ahg() failures to the caller and abort request processing when initialization fails.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603eAffected e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 122a730675565ff2ad210537c3fc3afb8291d482Affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before bf974994150cfd14bfc599748925f4d426e00d90Affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9Affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 5b7cefffd15d87c8103865f887cdcf9077d8094bAffected e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 3416db552eb378e54cb2f2ce0db5f0df88654bdaAffected e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before ca99431820e8cac19f6a091c04da54cbe8d64f52Affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 091c6162c022cbdfb64219708a71728cfd1d4600Affected
LinuxLinux	4.14Affected before 4.14Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603eAffected
e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 122a730675565ff2ad210537c3fc3afb8291d482Affected
e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before bf974994150cfd14bfc599748925f4d426e00d90Affected
e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9Affected
e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 5b7cefffd15d87c8103865f887cdcf9077d8094bAffected
e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 3416db552eb378e54cb2f2ce0db5f0df88654bdaAffected
e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before ca99431820e8cac19f6a091c04da54cbe8d64f52Affected
e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 091c6162c022cbdfb64219708a71728cfd1d4600Affected

LinuxLinux

4.14Affected
before 4.14Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.