VulnerabilityPublished 17 Sep 2026Updated 19 Oct 2026

CVE-2026-93109: Linux kernel · RDMA/mlx5: Drain RCU callbacks during module teardown

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in e37cdd75f8d61c1123d324ae5667ac3da562290e : update Linux kernel when convenient.

Data as of 26 Oct 2026, 13:47 UTC

Severity

Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS: 0.2% chance of exploitation in 30 days – higher than 11% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in e37cdd75f8d61c1123d324ae5667ac3da562290e, ca428e597f12b278bf158356e34641e6386cfa82, 4664368b9bd9d5d79ebad24056b98c34b9fed20f +4

Exploitation evidence

Disclosed: evidence found.
CVE published 17 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 6898d1c661d79f4707d8ba82991b2195822780ca, < e37cdd75f8d61c1123d324ae5667ac3da562290e	Fixed in e37cdd75f8d61c1123d324ae5667ac3da562290e
LinuxLinux	Affected ≥ 6898d1c661d79f4707d8ba82991b2195822780ca, < ca428e597f12b278bf158356e34641e6386cfa82	Fixed in ca428e597f12b278bf158356e34641e6386cfa82
LinuxLinux	Affected ≥ 6898d1c661d79f4707d8ba82991b2195822780ca, < 4664368b9bd9d5d79ebad24056b98c34b9fed20f	Fixed in 4664368b9bd9d5d79ebad24056b98c34b9fed20f
LinuxLinux	Affected ≥ 6898d1c661d79f4707d8ba82991b2195822780ca, < 59d60e04afd012f07e996d2e34cb90a4ec6f5cff	Fixed in 59d60e04afd012f07e996d2e34cb90a4ec6f5cff
LinuxLinux	Affected ≥ 6898d1c661d79f4707d8ba82991b2195822780ca, < 7babc25d8dd5b7642920fbc0737cfd1469e7025b	Fixed in 7babc25d8dd5b7642920fbc0737cfd1469e7025b
LinuxLinux	Affected ≥ 6898d1c661d79f4707d8ba82991b2195822780ca, < 4be7810ba70291abb2f68cc6db0ae1b93ee9c76a	Fixed in 4be7810ba70291abb2f68cc6db0ae1b93ee9c76a

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Drain RCU callbacks during module teardown devx_free_subscription() can remain queued after the last DevX event file drops its module reference or an auxiliary driver detaches its devices. mlx5_ib can then unload before the callback runs. Registration error unwind has the same risk because driver registration can attach existing devices before failing. Wait after all drivers have stopped.

References

Community reviews

Loading reviews…