CVE-2026-93110

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Wait for RCU callbacks before unloading ib_core

put_gid_ndev() is queued with call_rcu() and implemented in ib_core. Stopping the workqueues does not drain callbacks already queued, so RCU could invoke it after the module code has been unloaded.

synchronize_rcu() does not wait for callbacks. Wait for them after all producers have stopped.

Affected product:

AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , Debian 11 ELS , Oracle Linux 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Ubuntu 20.04 ELS

Affected packages:

linux @ 5.4.0 (+6 more)

Live-patch status from KernelCare for each operating system.