PT-2026-44235 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46112

NVD

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix unlocked call to hns roce qp remove()

Sashiko points out that hns roce qp remove() requires the caller to hold locks. The error flow in hns roce create qp common() doesn't hold those locks for the error unwind so it risks corrupting memory.

Grab the same locks the other two callers use.

Related Identifiers

CVE-2026-46112

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46112 · Security Note
• https://git.kernel.org/stable/c/fb4ae739811d467409bd07d0e36cfd4140f3d26a · Note
• https://git.kernel.org/stable/c/615d9d260c32bb678504ca96f29ae46f9d745155 · Note
• https://git.kernel.org/stable/c/1912f78798505dc9c637081bbddfbf1c22494c49 · Note
• https://git.kernel.org/stable/c/0c99acbc8b6c6dd526ae475a48ee1897b61072fb · Note
• https://git.kernel.org/stable/c/fcf6a832c0d5b2bc5398d6996c5570d3ee7993fb · Note