CVE-2026-46126

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() Sashiko points out there are two bugs here in the error unwind flow, both related to how the WQ table is unwound. First there is a double i– on the first failure path due to the while loop having a i–, remove it. Second if mana_ib_install_cq_cb() fails then mana_create_wq_obj() is not undone due to the above i–. A flaw was found in the Linux kernel’s RDMA/mana component. This issue occurs during the error unwind flow in the mana_ib_create_qp_rss() function, specifically related to the Work Queue (WQ) table cleanup. Incorrect handling of the cleanup process, including a double decrement and an undone operation, could lead to improper resource management. This may result in system instability or a denial of service (DoS).

Live-patch status from KernelCare for each operating system.