CVE-2026-93108

RDMA/ipoib: Drain RCU callbacks during module teardown

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/ipoib: Drain RCU callbacks during module teardown

IPoIB reclamation completions can be signaled from inside an RCU callback. Teardown can wake before the callback returns and unload ib_ipoib while its code is still executing.

Client registration failure can also remove already-added devices and queue callbacks. Wait after client and workqueue teardown.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b63b70d8774175b6f8393c495fe455f0fba55ce1 to before bb9c23733a0c50e136bd40c27cb60023cc58e22cAffected b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 4a6dc313f9661f80e4ed43461d7ed5615c2450caAffected b63b70d8774175b6f8393c495fe455f0fba55ce1 to before d8917353966d1d5a486437dd0dd68a2cf8ecb136Affected b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 7bc08d7f9338c9f9c09965e5d020591c793a80cbAffected b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 2b3330cfc097db2d31f47ad09261967630270d66Affected b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 8dc5ffcb8efcc01e44dd1ebc490eaae72de3fadfAffected b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 24ce944721dcd92ae62e7a448d770e2a3e79f5fdAffected b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 31b7c700670830a0e8a4cdcd451c88a13cc5dc48Affected
LinuxLinux	3.6Affected before 3.6Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

b63b70d8774175b6f8393c495fe455f0fba55ce1 to before bb9c23733a0c50e136bd40c27cb60023cc58e22cAffected
b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 4a6dc313f9661f80e4ed43461d7ed5615c2450caAffected
b63b70d8774175b6f8393c495fe455f0fba55ce1 to before d8917353966d1d5a486437dd0dd68a2cf8ecb136Affected
b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 7bc08d7f9338c9f9c09965e5d020591c793a80cbAffected
b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 2b3330cfc097db2d31f47ad09261967630270d66Affected
b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 8dc5ffcb8efcc01e44dd1ebc490eaae72de3fadfAffected
b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 24ce944721dcd92ae62e7a448d770e2a3e79f5fdAffected
b63b70d8774175b6f8393c495fe455f0fba55ce1 to before 31b7c700670830a0e8a4cdcd451c88a13cc5dc48Affected

LinuxLinux

3.6Affected
before 3.6Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.