CVE-2026-46117
Awaiting Analysis Awaiting Analysis - Queue
RDMA/mana QP Creation Failure Due to Invalid WQ and CQ Configuration

Publication date: 2026-05-28

Last updated on: 2026-05-30

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-28
Last Modified
2026-05-30
Generated
2026-06-17
AI Q&A
2026-05-28
EPSS Evaluated
2026-06-16
NVD
CVE-2026-46117
EUVD
EUVD-2026-32876
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

This vulnerability can lead to kernel corruption if exploited, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code with kernel privileges.

Since it involves the kernel, the impact could be severe, affecting the overall security and reliability of the affected Linux system.

Executive Summary

This vulnerability exists in the Linux kernel's RDMA/mana component. It involves a user being able to trigger a WARN_ON() condition in the mana_ib_create_qp_rss() function by specifying Work Queues (WQs) that share the same Completion Queue (CQ) as part of the user API (uAPI). Triggering this WARN_ON() leads to kernel corruption.

The issue was resolved by rejecting such requests outright and failing the creation of the Queue Pair (QP) to prevent kernel corruption.

Mitigation Strategies

To mitigate this vulnerability, the Linux kernel has been updated to reject user requests that trigger the WARN_ON() condition in mana_ib_create_qp_rss(), thereby failing the QP creation outright.

Therefore, the immediate step is to update your Linux kernel to a version that includes this fix.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-46117. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart