CVE-2026-93277

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the RDMA/bnxt re component where destroy callbacks zero the udata output after driver resources are torn down. If userspace access fails, uverbs preserves the uobject and may trigger the destroy callback again while the driver resource has already been freed. Additionally, in the rdma create ah() function, the hardware object can be leaked if ib respond empty udata() is not called at the start of the create and modify flows.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.