CVE-2026-93104
2026-09-17
17h18 +00:00
17h18 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rvt: Return NULL after port allocation failure
rvt_alloc_device() deallocates the IB device when its port array cannot
be allocated but then returns the pointer to the released allocation.
Callers treat any non-NULL value as valid and dereference it, resulting
in a use-after-free.
Return NULL immediately after deallocation so callers can propagate the
allocation failure.
