Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected c15d7802a42402a87880a17eee89ff023e49ecc0 before 9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71; affected c15d7802a42402a87880a17eee89ff023e49ecc0 before 9ef65af26b2a6738bf15812042e84b3112402d3a; affected c15d7802a42402a87880a17eee89ff023e49ecc0 before db991ba50087ad99fa12a2c483aa3be19671ea73; affected c15d7802a42402a87880a17eee89ff023e49ecc0 before 159f2efabc89d3f931d38f2d35876535d4abf0a3 |
| Linux / Linux | affected 6.8; unaffected 0 before 6.8; unaffected 6.12.91 through 6.12.*; unaffected 6.18.30 through 6.18.*; unaffected 7.0.7 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71
- https://git.kernel.org/stable/c/9ef65af26b2a6738bf15812042e84b3112402d3a
- https://git.kernel.org/stable/c/db991ba50087ad99fa12a2c483aa3be19671ea73
- https://git.kernel.org/stable/c/159f2efabc89d3f931d38f2d35876535d4abf0a3
ADP enrichment
A flaw was found in the Linux kernel's RDMA/mana component. A local user could trigger a kernel corruption by providing specific configurations through the user Application Programming Interface (uAPI) that cause an internal error. This issue arises when Work Queues (WQs) are specified to share the same Completion Queue (CQ), leading to an unstable system state.
- https://access.redhat.com/security/cve/CVE-2026-46117
- https://bugzilla.redhat.com/show_bug.cgi?id=2482576
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46117.json
- https://access.redhat.com/errata/RHSA-2026:30129
- https://access.redhat.com/errata/RHSA-2026:65712
- https://access.redhat.com/errata/RHSA-2026:67720
- https://access.redhat.com/errata/RHSA-2026:27789
- https://access.redhat.com/errata/RHSA-2026:42552
- https://access.redhat.com/errata/RHSA-2026:42550
No English description supplied.
No references supplied.