Get real-time updates on Telegram
CVE-2026-93037: Linux 4.14
CVE-2026-93037. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00164 (percentile 0.05264), scored 17-Oct-2026.
Affected technology
Linux · e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before cb73c2fe6e9cf563c99f22b7c8bca0d5f70d603e, e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 122a730675565ff2ad210537c3fc3afb8291d482, e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before bf974994150cfd14bfc599748925f4d426e00d90, e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before fd6dee13f3857259b6b2ddd28e1ed95fd94ae2f9, e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 5b7cefffd15d87c8103865f887cdcf9077d8094b, e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 3416db552eb378e54cb2f2ce0db5f0df88654bda, e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before ca99431820e8cac19f6a091c04da54cbe8d64f52, e3304b7cc4f14d365f46d6847a35563ae8b017f7 to before 091c6162c022cbdfb64219708a71728cfd1d4600
Linux
Linux · 4.14
Linux
Component: Not specified by the source
File: drivers/infiniband/hw/hfi1/user_sdma.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00164 · percentile 0.05264 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-93037.html