High 7.8Published May 28, 2026

CVE-2026-46117RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

Updated under an hour ago (Oct 27, 2026, 8:20 PM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-1288, CWE-20
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Undergoing Analysis
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c15d7802a42402a87880a17eee89ff023e49ecc0 before 9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71; from c15d7802a42402a87880a17eee89ff023e49ecc0 before 9ef65af26b2a6738bf15812042e84b3112402d3a; from c15d7802a42402a87880a17eee89ff023e49ecc0 before db991ba50087ad99fa12a2c483aa3be19671ea73; from c15d7802a42402a87880a17eee89ff023e49ecc0 before 159f2efabc89d3f931d38f2d35876535d4abf0a3	CNA record
Red Hat Red Hat Enterprise Linux 10 redhat:enterprise_linux	from 0:6.12.0-211.28.1.el10_2 not affected	CISA ADP
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions redhat:rhel_e4s	from 0:5.14.0-427.149.1.el9_4 not affected	CISA ADP
linux linux_kernel linux:linux_kernel	from 6.8 before 6.12.91; from 6.13 before 6.18.30; from 6.19 before 7.0.7; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71	patch
https://git.kernel.org/stable/c/9ef65af26b2a6738bf15812042e84b3112402d3a	patch
https://git.kernel.org/stable/c/db991ba50087ad99fa12a2c483aa3be19671ea73	patch
https://git.kernel.org/stable/c/159f2efabc89d3f931d38f2d35876535d4abf0a3	patch
https://access.redhat.com/errata/RHSA-2026:27789
https://access.redhat.com/errata/RHSA-2026:30129
https://access.redhat.com/errata/RHSA-2026:42550
https://access.redhat.com/errata/RHSA-2026:42552
https://access.redhat.com/errata/RHSA-2026:65712
https://access.redhat.com/errata/RHSA-2026:67720
1–10 of 13

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.