CVE-2026-93104

In the Linux kernel, the following vulnerability has been resolved: RDMA/rvt: Return NULL after port allocation failure rvt_alloc_device() deallocates the IB device when its port array cannot be allocated but then returns the pointer to the released allocation. Callers treat any non-NULL value as valid and dereference it, resulting in a use-after-free. Return NULL immediately after deallocation so callers can propagate the allocation failure.
CVSS

No CVSS.

Configurations

No configuration.

History

17 Sep 2026, 17:18

Type Values Removed Values Added
New CVE

Information

Published : 2026-09-17 17:18

Updated : 2026-09-17 17:18


NVD link : CVE-2026-93104

Mitre link : CVE-2026-93104

CVE.ORG link : CVE-2026-93104


JSON object : View

Products Affected

No product.

CWE

No CWE.