CVE-2026-93109

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the RDMA mlx5 component where the devx free subscription() function can remain queued after the last DevX event file drops its module reference or an auxiliary driver detaches its devices. This allows the mlx5 ib module to unload before the Read-Copy-Update (RCU) callback—a mechanism used to synchronize access to data across multiple CPUs—runs. A similar risk occurs during registration error unwind because driver registration may attach existing devices before failing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.