Answer in brief
CVE-2026-93037 records a Unknown severity vulnerability in RDMA/hfi1: Propagate sdma_txinit_ahg() errors. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e3304b7cc4f14d365f46d6847a35563ae8b017f7 <cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603e || >=e3304b7cc4f14d365f46d6847a35563ae8b017f7 <122a730675565ff2ad210537c3fc3afb8291d482 || >=e3304b7cc4f14d365f46d6847a35563ae8b017f7 <bf974994150cfd14bfc599748925f4d426e00d90 || >=e3304b7cc4f14d365f46d6847a35563ae8b017f7 <fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9 || >=e3304b7cc4f14d365f46d6847a35563ae8b017f7 <5b7cefffd15d87c8103865f887cdcf9077d8094b || >=e3304b7cc4f14d365f46d6847a35563ae8b017f7 <3416db552eb378e54cb2f2ce0db5f0df88654bda || >=e3304b7cc4f14d365f46d6847a35563ae8b017f7 <ca99431820e8cac19f6a091c04da54cbe8d64f52 || >=e3304b7cc4f14d365f46d6847a35563ae8b017f7 <091c6162c022cbdfb64219708a71728cfd1d4600 | cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603e, 122a730675565ff2ad210537c3fc3afb8291d482, bf974994150cfd14bfc599748925f4d426e00d90, fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9, 5b7cefffd15d87c8103865f887cdcf9077d8094b, 3416db552eb378e54cb2f2ce0db5f0df88654bda, ca99431820e8cac19f6a091c04da54cbe8d64f52, 091c6162c022cbdfb64219708a71728cfd1d4600 |
| Linux/Linuxgeneric | 4.14 | Not reported |
Published upstream
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 17, 2026
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdma_txinit_ahg() errors set_txreq_header_ahg() ignores the return value of sdma_txinit_ahg(). If sdma_txinit_ahg() fails, it returns before initializing tx->txreq. However, set_txreq_header_ahg() ignores the error and returns the AHG change count, causing the caller to continue processing the request as though initialization had succeeded. Propagate sdma_txinit_ahg() failures to the caller and abort request processing when initialization fails. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Quoted source text, attributed separately from HOL analysis.