CVE 7.8 HIGH

RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()_CVE-2026-46117

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

Sashiko points out that the user can specify WQs sharing the same CQ as a
part of the uAPI and this will trigger the WARN_ON() then go on to corrupt
the kernel.

Just reject it outright and fail the QP creation.

Basic Information

ID CVE-2026-46117
Source Linux
Published May 28, 2026 at 09:35
Modified May 30, 2026 at 10:47

Affected Product

Vendor Linux
Product Linux
Version c15d7802a42402a87880a17eee89ff023e49ecc0
Affected Versions Linux Linux c15d7802a42402a87880a17eee89ff023e49ecc0
Linux Linux c15d7802a42402a87880a17eee89ff023e49ecc0
Linux Linux c15d7802a42402a87880a17eee89ff023e49ecc0
Linux Linux c15d7802a42402a87880a17eee89ff023e49ecc0
Linux Linux 6.8

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.