CVE-2026-93110

A flaw was found in the Linux kernel's RDMA core component. A race condition exists where RCU (Read-Copy-Update) callbacks, specifically put_gid_ndev(), can be invoked after the ib_core module has been unloaded. This occurs because stopping workqueues does not drain already queued callbacks, allowing RCU to call them on freed memory. This vulnerability could lead to memory corruption, potentially causing a system crash or other unpredictable behavior.

Red Hat has evaluated this issue as having a Moderate impact because exploitation requires local access and is constrained to the specific window when the InfiniBand core module is unloaded from the kernel. In typical Red Hat Enterprise Linux environments, RDMA hardware drivers are rarely utilized on general-purpose systems, and kernel modules are not routinely removed during normal production workloads. Although executing uncompleted callbacks after module teardown can lead to kernel memory corruption or a denial of service (system crash), triggering this condition demands administrative interaction or module removal, significantly limiting real-world exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.