- 7.8HighCVSS base score
- 0.17%Exploitation in 30 daysEPSS · top 94% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdma_txinit_ahg() errors set_txreq_header_ahg() ignores the return value of sdma_txinit_ahg(). If sdma_txinit_ahg() fails, it returns before initializing tx->txreq. However, set_txreq_header_ahg() ignores the error and returns the AHG change count, causing the caller to continue processing the request as though initialization had succeeded. Propagate sdma_txinit_ahg() failures to the caller and abort request processing when initialization fails. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Timeline
ID reserved
By Linux
Published
- 32 days later
· 32 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Received | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.17% · top 94% of all CVEs (12 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 – < cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603e
- affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 – < 122a730675565ff2ad210537c3fc3afb8291d482
- affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 – < bf974994150cfd14bfc599748925f4d426e00d90
- affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 – < fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9
- affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 – < 5b7cefffd15d87c8103865f887cdcf9077d8094b
- affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 – < 3416db552eb378e54cb2f2ce0db5f0df88654bda
- affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 – < ca99431820e8cac19f6a091c04da54cbe8d64f52
- affected e3304b7cc4f14d365f46d6847a35563ae8b017f7 – < 091c6162c022cbdfb64219708a71728cfd1d4600
- affected 4.14
- unaffected < 4.14
- unaffected 5.10.270 – ≤ 5.10.*
- unaffected 5.15.221 – ≤ 5.15.*
- unaffected 6.1.188 – ≤ 6.1.*
- unaffected 6.6.157 – ≤ 6.6.*
- unaffected 6.12.110 – ≤ 6.12.*
- unaffected 6.18.52 – ≤ 6.18.*
- unaffected 7.2.6 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References8
- https://git.kernel.org/stable/c/cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603e (opens in a new tab)
- https://git.kernel.org/stable/c/122a730675565ff2ad210537c3fc3afb8291d482 (opens in a new tab)
- https://git.kernel.org/stable/c/bf974994150cfd14bfc599748925f4d426e00d90 (opens in a new tab)
- https://git.kernel.org/stable/c/fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9 (opens in a new tab)
- https://git.kernel.org/stable/c/5b7cefffd15d87c8103865f887cdcf9077d8094b (opens in a new tab)
- https://git.kernel.org/stable/c/3416db552eb378e54cb2f2ce0db5f0df88654bda (opens in a new tab)
- https://git.kernel.org/stable/c/ca99431820e8cac19f6a091c04da54cbe8d64f52 (opens in a new tab)
- https://git.kernel.org/stable/c/091c6162c022cbdfb64219708a71728cfd1d4600 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-82147 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-93037)Record last updated .