Riskcovery

CVE-2026-46145

RDMA/mana: Validate rx_hash_key_len

State
Published
Severity
7.8 High
Published
May 28, 2026
Updated
Oct 19, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mana: Validate rx_hash_key_len

Sashiko points out that rx_hash_key_len comes from a uAPI structure and is blindly passed to memcpy, allowing the userspace to trash kernel memory. Bounds check it so the memcpy cannot overflow.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hredhat-SADP

Weaknesses

  • CWE-787 Out-of-bounds Write
  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

ProductVersions
LinuxLinux
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to before 7d7c9f0fcd19c4d2f0164347c58d49cafa961b72Affected
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to before 11c1431d641e0e4e0529e96957995820600c7287Affected
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to before 012796f9541fcd0c1fa8ae4da7eb4d83931ef838Affected
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to before 7d94f155f354b961c598f71bafa804dceded513fAffected
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to before 6dd2d4ad9c8429523b1c220c5132bd551c006425Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.141 through 6.6.*Not affected
  • 6.12.88 through 6.12.*Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.