CVE-2026-93037 PUBLISHED

RDMA/hfi1: Propagate sdma_txinit_ahg() errors

Assigner: Linux
Reserved: 17.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Propagate sdma_txinit_ahg() errors

set_txreq_header_ahg() ignores the return value of sdma_txinit_ahg().

If sdma_txinit_ahg() fails, it returns before initializing tx->txreq. However, set_txreq_header_ahg() ignores the error and returns the AHG change count, causing the caller to continue processing the request as though initialization had succeeded.

Propagate sdma_txinit_ahg() failures to the caller and abort request processing when initialization fails.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from e3304b7cc4f14d365f46d6847a35563ae8b017f7 to cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603e (excl.)
  • affected from e3304b7cc4f14d365f46d6847a35563ae8b017f7 to 122a730675565ff2ad210537c3fc3afb8291d482 (excl.)
  • affected from e3304b7cc4f14d365f46d6847a35563ae8b017f7 to bf974994150cfd14bfc599748925f4d426e00d90 (excl.)
  • affected from e3304b7cc4f14d365f46d6847a35563ae8b017f7 to fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9 (excl.)
  • affected from e3304b7cc4f14d365f46d6847a35563ae8b017f7 to 5b7cefffd15d87c8103865f887cdcf9077d8094b (excl.)
  • affected from e3304b7cc4f14d365f46d6847a35563ae8b017f7 to 3416db552eb378e54cb2f2ce0db5f0df88654bda (excl.)
  • affected from e3304b7cc4f14d365f46d6847a35563ae8b017f7 to ca99431820e8cac19f6a091c04da54cbe8d64f52 (excl.)
  • affected from e3304b7cc4f14d365f46d6847a35563ae8b017f7 to 091c6162c022cbdfb64219708a71728cfd1d4600 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.14 is affected
  • unaffected from 0 to 4.14 (excl.)
  • unaffected from 5.10.270 to 5.10.* (incl.)
  • unaffected from 5.15.221 to 5.15.* (incl.)
  • unaffected from 6.1.188 to 6.1.* (incl.)
  • unaffected from 6.6.157 to 6.6.* (incl.)
  • unaffected from 6.12.110 to 6.12.* (incl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References