Medium 5.5Published May 28, 2026

CVE-2026-46144RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()

Updated under an hour ago (Oct 27, 2026, 9:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() Sashiko points out that mana_ib_cfg_vport_steering() is leaked, the normal destroy path cleans it up.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	0266a177631d4c6b963b5b12dd986a8c5abdbf06 builds before 190e570cc0fc7f57eacf80d2b854ba54b4dfad6b; from 0266a177631d4c6b963b5b12dd986a8c5abdbf06 before 726af85ea4af750b2f75095e24e3cd99797344cb; from 0266a177631d4c6b963b5b12dd986a8c5abdbf06 before ab64c63b460bbd0521480bf90d5695783f5e66bc; 0266a177631d4c6b963b5b12dd986a8c5abdbf06 builds before 30e8a2f33815d8f51b8f8b829c07af16c671cc27; 0266a177631d4c6b963b5b12dd986a8c5abdbf06 builds before 6aaa978c6b6218cfac15fe1dab17c76fe229ce3f	CNA record
linux linux_kernel linux:linux_kernel	from 6.2 before 6.6.141; from 6.7 before 6.12.88; from 6.13 before 6.18.30; from 6.19 before 7.0.7; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/190e570cc0fc7f57eacf80d2b854ba54b4dfad6b	patch
https://git.kernel.org/stable/c/726af85ea4af750b2f75095e24e3cd99797344cb	patch
https://git.kernel.org/stable/c/ab64c63b460bbd0521480bf90d5695783f5e66bc	patch
https://git.kernel.org/stable/c/30e8a2f33815d8f51b8f8b829c07af16c671cc27	patch
https://git.kernel.org/stable/c/6aaa978c6b6218cfac15fe1dab17c76fe229ce3f	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.