Riskcovery

CVE-2026-46117

RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

State
Published
Severity
7.8 High
Published
May 28, 2026
Updated
Oct 19, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel.

Just reject it outright and fail the QP creation.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hredhat-SADP

Weaknesses

  • CWE-1288 Improper Validation of Consistency within Input
  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
LinuxLinux
  • c15d7802a42402a87880a17eee89ff023e49ecc0 to before 9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71Affected
  • c15d7802a42402a87880a17eee89ff023e49ecc0 to before 9ef65af26b2a6738bf15812042e84b3112402d3aAffected
  • c15d7802a42402a87880a17eee89ff023e49ecc0 to before db991ba50087ad99fa12a2c483aa3be19671ea73Affected
  • c15d7802a42402a87880a17eee89ff023e49ecc0 to before 159f2efabc89d3f931d38f2d35876535d4abf0a3Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.