High 7.8Published May 28, 2026

CVE-2026-46112RDMA/hns: Fix unlocked call to hns_roce_qp_remove()

Updated under an hour ago (Oct 26, 2026, 12:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() Sashiko points out that hns_roce_qp_remove() requires the caller to hold locks. The error flow in hns_roce_create_qp_common() doesn't hold those locks for the error unwind so it risks corrupting memory. Grab the same locks the other two callers use.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Undergoing Analysis
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e088a685eae94a0607b8f7b99949a0e14d748813 before 1f0a3aa8b569d010316b427238222c5d899f9618; from e088a685eae94a0607b8f7b99949a0e14d748813 before b6296ff2475fc95ee6ea1b528c4b385302808186; from e088a685eae94a0607b8f7b99949a0e14d748813 before fb4ae739811d467409bd07d0e36cfd4140f3d26a; from e088a685eae94a0607b8f7b99949a0e14d748813 before fcf6a832c0d5b2bc5398d6996c5570d3ee7993fb; from e088a685eae94a0607b8f7b99949a0e14d748813 before 1912f78798505dc9c637081bbddfbf1c22494c49; from e088a685eae94a0607b8f7b99949a0e14d748813 before 615d9d260c32bb678504ca96f29ae46f9d745155; from e088a685eae94a0607b8f7b99949a0e14d748813 before 0c99acbc8b6c6dd526ae475a48ee1897b61072fb	CNA record
linux linux_kernel linux:linux_kernel	from 4.17 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.88; from 6.13 before 6.18.30; from 6.19 before 7.0.7; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/1f0a3aa8b569d010316b427238222c5d899f9618	patch
https://git.kernel.org/stable/c/b6296ff2475fc95ee6ea1b528c4b385302808186	patch
https://git.kernel.org/stable/c/fb4ae739811d467409bd07d0e36cfd4140f3d26a	patch
https://git.kernel.org/stable/c/fcf6a832c0d5b2bc5398d6996c5570d3ee7993fb	patch
https://git.kernel.org/stable/c/1912f78798505dc9c637081bbddfbf1c22494c49	patch
https://git.kernel.org/stable/c/615d9d260c32bb678504ca96f29ae46f9d745155	patch
https://git.kernel.org/stable/c/0c99acbc8b6c6dd526ae475a48ee1897b61072fb	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.