CVE-2026-46117

Undergoing Analysis Undergoing Analysis - In Progress

RDMA/mana QP Creation Failure Due to Invalid WQ and CQ Configuration

Publication date: 2026-05-28

Last updated on: 2026-06-30

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-28

Last Modified

2026-06-30

Generated

2026-07-08

AI Q&A

2026-05-28

EPSS Evaluated

2026-07-06

NVD

CVE-2026-46117

EUVD

EUVD-2026-32876

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.13 (inc) to 6.18.30 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.7 (exc)
linux	linux_kernel	From 6.8 (inc) to 6.12.91 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
CWE-1288	The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's RDMA/mana component. It involves a user being able to trigger a WARN_ON() condition in the mana_ib_create_qp_rss() function by specifying Work Queues (WQs) that share the same Completion Queue (CQ) as part of the user API (uAPI). Triggering this WARN_ON() leads to kernel corruption.

The issue was resolved by rejecting such requests outright and failing the creation of the Queue Pair (QP) to prevent kernel corruption.

Impact Analysis

This vulnerability can lead to kernel corruption if exploited, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code with kernel privileges.

Since it involves the kernel, the impact could be severe, affecting the overall security and reliability of the affected Linux system.

Mitigation Strategies

To mitigate this vulnerability, the Linux kernel has been updated to reject user requests that trigger the WARN_ON() condition in mana_ib_create_qp_rss(), thereby failing the QP creation outright.

Therefore, the immediate step is to update your Linux kernel to a version that includes this fix.

Hi! I’m here to help you understand CVE-2026-46117. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70