CVE-2026-93108

A flaw was found in the Linux kernel's RDMA/ipoib module. A race condition during module teardown allows the ib_ipoib module to be unloaded while its code is still executing. This can occur when IPoIB reclamation completions are signaled from within an RCU (Read-Copy-Update) callback, or during client registration failures. This vulnerability could lead to a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and is limited to causing a denial of service during module unloading or device teardown. The ib_ipoib driver is not loaded by default on typical systems and is only utilized in environments equipped with active InfiniBand hardware and network configurations. Consequently, deployments that do not utilize InfiniBand networking remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.