CVE-2026-46189
Double Free in Linux Kernel RDMA/vmw_pvrdma Driver
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux_kernel | linux_kernel | * |
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's RDMA vmw_pvrdma component. It involves a double free error occurring in the function pvrdma_alloc_ucontext(). Specifically, the function pvrdma_uar_free() is called twice on the same resource because it is already called within pvrdma_dealloc_ucontext(), and calling it again before that leads to a double free condition.
How can this vulnerability impact me? :
A double free vulnerability can lead to undefined behavior such as memory corruption, crashes, or potential exploitation by attackers to execute arbitrary code or cause denial of service. In this case, the double free in the Linux kernel's RDMA vmw_pvrdma component could destabilize the system or be leveraged for privilege escalation or other malicious activities.