CVE-2026-93109

RDMA/mlx5: Drain RCU callbacks during module teardown

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Drain RCU callbacks during module teardown

devx_free_subscription() can remain queued after the last DevX event file drops its module reference or an auxiliary driver detaches its devices. mlx5_ib can then unload before the callback runs.

Registration error unwind has the same risk because driver registration can attach existing devices before failing. Wait after all drivers have stopped.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6898d1c661d79f4707d8ba82991b2195822780ca to before ca428e597f12b278bf158356e34641e6386cfa82Affected 6898d1c661d79f4707d8ba82991b2195822780ca to before 59d60e04afd012f07e996d2e34cb90a4ec6f5cffAffected 6898d1c661d79f4707d8ba82991b2195822780ca to before 2f946e7839f677fa14574b6babad14b37ae0bbbeAffected 6898d1c661d79f4707d8ba82991b2195822780ca to before 4be7810ba70291abb2f68cc6db0ae1b93ee9c76aAffected 6898d1c661d79f4707d8ba82991b2195822780ca to before 7babc25d8dd5b7642920fbc0737cfd1469e7025bAffected 6898d1c661d79f4707d8ba82991b2195822780ca to before 4664368b9bd9d5d79ebad24056b98c34b9fed20fAffected 6898d1c661d79f4707d8ba82991b2195822780ca to before e37cdd75f8d61c1123d324ae5667ac3da562290eAffected
LinuxLinux	5.6Affected before 5.6Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

6898d1c661d79f4707d8ba82991b2195822780ca to before ca428e597f12b278bf158356e34641e6386cfa82Affected
6898d1c661d79f4707d8ba82991b2195822780ca to before 59d60e04afd012f07e996d2e34cb90a4ec6f5cffAffected
6898d1c661d79f4707d8ba82991b2195822780ca to before 2f946e7839f677fa14574b6babad14b37ae0bbbeAffected
6898d1c661d79f4707d8ba82991b2195822780ca to before 4be7810ba70291abb2f68cc6db0ae1b93ee9c76aAffected
6898d1c661d79f4707d8ba82991b2195822780ca to before 7babc25d8dd5b7642920fbc0737cfd1469e7025bAffected
6898d1c661d79f4707d8ba82991b2195822780ca to before 4664368b9bd9d5d79ebad24056b98c34b9fed20fAffected
6898d1c661d79f4707d8ba82991b2195822780ca to before e37cdd75f8d61c1123d324ae5667ac3da562290eAffected

LinuxLinux

5.6Affected
before 5.6Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.