{"id":"CVE-2026-93153","summary":"RDMA/bng_re: return a timeout when firmware responses stall","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bng_re: return a timeout when firmware responses stall\n\n__wait_for_resp() documents that it returns a non-zero error when a\nfirmware command does not complete, and bng_re_rcfw_send_message() already\nmarks the firmware as stalled when the helper returns -ENODEV.\n\nHowever, the helper ignores wait_event_timeout() expiry.  If the response\nslot remains in use after the timeout and after the polled CREQ service\nattempt, the loop starts another full timeout period and can repeat\nforever.\n\nReturn -ENODEV after a timed out wait that still has no response.  The\nexisting caller then marks FIRMWARE_STALL_DETECTED and returns\n-ETIMEDOUT to the command issuer.","modified":"2026-09-19T03:47:26.894820847Z","published":"2026-09-17T16:11:49.443Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93153.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/02d4ee65dc2e883f554169155937742e6014c243"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5f9576c6734abca88a02db72c466e09d2eddf160"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93153.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93153"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"53c6ee7d7f68a0679f8ddc703338aa2550d24a17"},{"fixed":"02d4ee65dc2e883f554169155937742e6014c243"},{"fixed":"5f9576c6734abca88a02db72c466e09d2eddf160"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93153.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93153.json"}}],"schema_version":"1.9.0"}