CVE-2026-46178
Resource Leak in Linux Kernel RDMA/mlx4 Driver
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux_kernel | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a resource leak in the Linux kernel related to RDMA (Remote Direct Memory Access) functionality, specifically in the mlx4 driver. The issue occurs in the mlx4_ib_create_srq() function where the mlx4_srq_alloc() resource allocation was not properly undone during error handling, leading to a resource leak. The fix involves adding a missing call to mlx4_srq_free() to properly release resources when an error occurs.
How can this vulnerability impact me? :
The resource leak could lead to exhaustion of system resources over time if errors occur repeatedly, potentially causing degraded system performance or instability in systems using the mlx4 RDMA driver. This could affect applications relying on RDMA for high-performance networking by causing failures or reduced availability.