VULNERABILITY INTELLIGENCE

CVE-2026-46117

CVSS score7.8 HIGH
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-05-28
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.

Weakness classification

  • nvd@nist.gov: CWE-617
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-20
  • 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-1288

Primary references