Medium 5.5Published May 28, 2026

CVE-2026-46126RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()

Updated under an hour ago (Oct 27, 2026, 12:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() Sashiko points out there are two bugs here in the error unwind flow, both related to how the WQ table is unwound. First there is a double i-- on the first failure path due to the while loop having a i--, remove it. Second if mana_ib_install_cq_cb() fails then mana_create_wq_obj() is not undone due to the above i--.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Undergoing Analysis
Record last updated: Jun 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c15d7802a42402a87880a17eee89ff023e49ecc0 before 8f23eb6c50f1a4bf32fc4d62cfb9fc39e8e586cf; from c15d7802a42402a87880a17eee89ff023e49ecc0 before bb9cb36eaefa4dcb7c0d9f7a01e5c739abdd53a8; from c15d7802a42402a87880a17eee89ff023e49ecc0 before 9a05a6798177e44dfbe18393be2c1ebb89ab06fd; from c15d7802a42402a87880a17eee89ff023e49ecc0 before 34ecf795692ee57c393109f4a24ccc313091e137	CNA record
linux linux_kernel linux:linux_kernel	from 6.8 before 6.12.88; from 6.13 before 6.18.30; from 6.19 before 7.0.7; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/8f23eb6c50f1a4bf32fc4d62cfb9fc39e8e586cf	patch
https://git.kernel.org/stable/c/bb9cb36eaefa4dcb7c0d9f7a01e5c739abdd53a8	patch
https://git.kernel.org/stable/c/9a05a6798177e44dfbe18393be2c1ebb89ab06fd	patch
https://git.kernel.org/stable/c/34ecf795692ee57c393109f4a24ccc313091e137	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.