CVE-2026-93277

CVE CVE-2026-93277EUVD EUVD-2026-86149Published 2026-09-24T15:52:19.000ZLast changed 2026-09-25T05:09:56.000ZCVSS 7.8

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy callback to run again, even though the driver resource has already been freed. Call ib_no_udata_io() before teardown so udata failures are detected while the resource is still intact, then return success after teardown completes. As part of this change, move ib_respond_empty_udata() to the start of the create and modify flows. While this is not strictly required for general create flows, as the core layer unwinds uobjects on failure, it is necessary for create AH. In _rdma_create_ah(), the HW object is otherwise leaked.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux patch: 0; bed686d8dcd4fbcaa18cf67468caaf8772acfc7a <d38c835925d4a3bfdf0a85ff2829ee90c709c561; 7.1; patch: 7.2.6; patch: 7.3-rc1; bed686d8dcd4fbcaa18cf67468caaf8772acfc7a <c5643ea4f040acc2f4d1e88f49bd0be51110ff2f

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.