CVE-2026-93103

A flaw was found in the Linux kernel's RDMA/hfi1 component. During an allocation failure, the hfi1_free_devdata() function can incorrectly attempt to free a device that was not properly initialized. This can lead to the removal of an unrelated device from the system's unit table. The consequence of this flaw is potential system instability or a denial of service for the affected device.

This vulnerability is rated as Low impact for Red Hat products because triggering the issue requires local access, specialized Intel Omni-Path Architecture hardware, and an atypical allocation failure during device setup. The hfi1 driver is not utilized on standard systems lacking dedicated Omni-Path fabric adapters. Even under triggering conditions, the impact is strictly limited to local denial of service via device unregistration without compromising data integrity or confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.