CVE-2026-46117

Katalog CVE

CVSS 7.8 · High EPSS 0,19%

Kerentanan Reachable Assertion pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.

Rincian

Terbit di NVD

28 Mei 2026

Terakhir diubah

16 September 2026

Status NVD

Undergoing Analysis

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion
CWE-1288: Improper Validation of Consistency within Input

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/159f2efabc89d3f931d38f2d35876535d4abf0a3 patch
• https://git.kernel.org/stable/c/9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71 patch
• https://git.kernel.org/stable/c/9ef65af26b2a6738bf15812042e84b3112402d3a patch
• https://git.kernel.org/stable/c/db991ba50087ad99fa12a2c483aa3be19671ea73 patch
• https://access.redhat.com/errata/RHSA-2026:27789
• https://access.redhat.com/errata/RHSA-2026:30129
• https://access.redhat.com/errata/RHSA-2026:42550
• https://access.redhat.com/errata/RHSA-2026:42552
• https://access.redhat.com/errata/RHSA-2026:65712
• https://access.redhat.com/errata/RHSA-2026:67720
• https://access.redhat.com/security/cve/CVE-2026-46117
• https://bugzilla.redhat.com/show_bug.cgi?id=2482576
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46117.json