CVE-2026-93037

RDMA/hfi1: Propagate sdma_txinit_ahg() errors

HIGH
7.8
CVSS Score
Published: September 17, 2026 at 04:10 PM UTC
Updated: October 19, 2026 at 10:16 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdma_txinit_ahg() errors set_txreq_header_ahg() ignores the return value of sdma_txinit_ahg(). If sdma_txinit_ahg() fails, it returns before initializing tx->txreq. However, set_txreq_header_ahg() ignores the error and returns the AHG change count, causing the caller to continue processing the request as though initialization had succeeded. Propagate sdma_txinit_ahg() failures to the caller and abort request processing when initialization fails. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.14e3304b7cc4f14d365f46d6847a35563ae8b017f7
Vendor states this is fixed in 091c6162c022cbdfb64219708a71728cfd1d4600 (fixed)
Vendor states this is fixed in 122a730675565ff2ad210537c3fc3afb8291d482 (fixed)
Vendor states this is fixed in 3416db552eb378e54cb2f2ce0db5f0df88654bda (fixed)
Vendor states this is fixed in 5b7cefffd15d87c8103865f887cdcf9077d8094b (fixed)
Vendor states this is fixed in bf974994150cfd14bfc599748925f4d426e00d90 (fixed)
Vendor states this is fixed in ca99431820e8cac19f6a091c04da54cbe8d64f52 (fixed)
Vendor states this is fixed in cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603e (fixed)
Vendor states this is fixed in fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9 (fixed)
Vendor states this is fixed in 4.14 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card