PT-2026-44240 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46117

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mana: Remove user triggerable WARN ON() in mana ib create qp rss()

Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN ON() then go on to corrupt the kernel.

Just reject it outright and fail the QP creation.

Fix

Related Identifiers

CVE-2026-46117

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-46117 · Security Note
• https://git.kernel.org/stable/c/9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71 · Note
• https://git.kernel.org/stable/c/159f2efabc89d3f931d38f2d35876535d4abf0a3 · Note
• https://git.kernel.org/stable/c/db991ba50087ad99fa12a2c483aa3be19671ea73 · Note
• https://git.kernel.org/stable/c/9ef65af26b2a6738bf15812042e84b3112402d3a · Note