CVE-2026-93104

RDMA/rvt: Return NULL after port allocation failure

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rvt: Return NULL after port allocation failure

rvt_alloc_device() deallocates the IB device when its port array cannot be allocated but then returns the pointer to the released allocation. Callers treat any non-NULL value as valid and dereference it, resulting in a use-after-free.

Return NULL immediately after deallocation so callers can propagate the allocation failure.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before 32d2cdb0f3cac430b04124c3b7248851fe2037f8Affected ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before b7129930d1ec46c03a0de07fdce6c29f75795006Affected ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before 5a1a7a5e2fe1a15824fa9ae5edd8f008259471d1Affected ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before 80968b42d13080bf7bc1f3ee17fef126ce2ad98fAffected ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before b1e1b25723af44328524c7b54433e4bf0ab9930cAffected ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before 2982eaf3b9d2d953318c74cd6f1b7576ea6d7b1fAffected
LinuxLinux	4.6Affected before 4.6Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before 32d2cdb0f3cac430b04124c3b7248851fe2037f8Affected
ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before b7129930d1ec46c03a0de07fdce6c29f75795006Affected
ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before 5a1a7a5e2fe1a15824fa9ae5edd8f008259471d1Affected
ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before 80968b42d13080bf7bc1f3ee17fef126ce2ad98fAffected
ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before b1e1b25723af44328524c7b54433e4bf0ab9930cAffected
ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to before 2982eaf3b9d2d953318c74cd6f1b7576ea6d7b1fAffected

LinuxLinux

4.6Affected
before 4.6Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.