Use-after-free in Linux kernel - CVE-2026-93110
Published: September 18, 2026
Vulnerability identifier: #VU150899
CSH Severity: Low
CVSS v4: 5.6 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-93110
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to cause a denial of service.
The vulnerability exists due to a use-after-free condition in the RDMA core ib_core cleanup routine when unloading the ib_core module after RCU callbacks have been queued. A local privileged user can cause queued callbacks to invoke unloaded module code to cause a denial of service.
Exploitation requires RCU callbacks queued by put_gid_ndev() before module unloading.
Affected software
Linux kernel
How to mitigate CVE-2026-93110
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/0d5817fa4819abdc445fa77b5be4f0d49334a864
- https://git.kernel.org/stable/c/1646e123e56c3ad679fbfb571e8eef6386efb729
- https://git.kernel.org/stable/c/48b72fa0d209a92fb51b834a6080171cfa207b2c
- https://git.kernel.org/stable/c/7853af5f15738dc00aebaa1fc9f1f0df40f6f603
- https://git.kernel.org/stable/c/7d75592114d1664623c8cf191a12b38052c04483
- https://git.kernel.org/stable/c/82dfd1df456227279b1c8c648983a530f2612098
- https://git.kernel.org/stable/c/8e4f1677c09d75d738099f42afcf65d8587b664a
- https://git.kernel.org/stable/c/9d998297fdaf47492f6679287f6552879d1a7e3a