CVE-2026-93115

A flaw was found in the Linux kernel's Mellanox mlxbf-pmc driver. A local attacker could exploit this by forcing the driver to bind to a device lacking an ACPI (Advanced Configuration and Power Interface) companion object. This action triggers a NULL pointer dereference, which can lead to a system crash and result in a Denial of Service (DoS).

This vulnerability is evaluated with a Low severity impact because exploiting it requires local privileges to force driver binding overrides and only affects systems running Mellanox BlueField hardware. On Red Hat Enterprise Linux systems, platform device re-binding through sysfs interfaces is restricted to administrative users, severely limiting unauthorized local exploitation. Consequently, the risk of an unprivileged denial of service under standard operating conditions is minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.