PT-2026-44235 · Linux · Linux Kernel

Sashiko · CVE-2026-46112 · Published 2026-05-28 · Updated 2026-07-08

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description A memory corruption issue exists in the RDMA hns component. The function hns roce qp remove() is called without the required locks during the error unwind process within the hns roce create qp common() function.

Recommendations Update to version 7.0.11-1.1.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-46112

ECHO-CBE4-EAD9-F85F

OPENSUSE-SU-2026:10954-1

SUSE-SU-2026:22521-1

SUSE-SU-2026:22522-1

SUSE-SU-2026:2799-1

SUSE-SU-2026:2800-1

Affected Products

Linux Kernel

References · 627

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46112.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:22521-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b6296ff2475fc95ee6ea1b528c4b385302808186 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:2799-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:22522-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46112 · Vendor Advisory
• https://git.kernel.org/stable/c/fcf6a832c0d5b2bc5398d6996c5570d3ee7993fb · Patch
• https://git.kernel.org/stable/c/1912f78798505dc9c637081bbddfbf1c22494c49 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-46112 · Vendor Advisory
• https://git.kernel.org/stable/c/fb4ae739811d467409bd07d0e36cfd4140f3d26a · Patch
• https://git.kernel.org/stable/c/615d9d260c32bb678504ca96f29ae46f9d745155 · Patch
• https://osv.dev/vulnerability/CVE-2026-46112 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46112 · Vendor Advisory
• https://git.kernel.org/stable/c/1f0a3aa8b569d010316b427238222c5d899f9618 · Patch