NetSight
IP …
high7.8

CVE-2026-46117

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out …

Impact

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.8 before 6.12.91
from 6.13 before 6.18.30
from 6.19 before 7.0.7
Version 7.1

Weakness classification

CWE-617CWE-20CWE-1288

References