Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-46112

RDMA/hns: Fix unlocked call to hns_roce_qp_remove()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() Sashiko points out that hns_roce_qp_remove() requires the caller to hold locks. The error flow in hns_roce_create_qp_common() doesn't hold those locks for the error unwind so it risks corrupting memory. Grab the same locks the other two callers use.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e088a685eae94a0607b8f7b99949a0e14d748813 to < 1f0a3aa8b569d010316b427238222c5d899f9618affected
  • e088a685eae94a0607b8f7b99949a0e14d748813 to < b6296ff2475fc95ee6ea1b528c4b385302808186affected
  • e088a685eae94a0607b8f7b99949a0e14d748813 to < fb4ae739811d467409bd07d0e36cfd4140f3d26aaffected
  • e088a685eae94a0607b8f7b99949a0e14d748813 to < fcf6a832c0d5b2bc5398d6996c5570d3ee7993fbaffected
  • e088a685eae94a0607b8f7b99949a0e14d748813 to < 1912f78798505dc9c637081bbddfbf1c22494c49affected
  • e088a685eae94a0607b8f7b99949a0e14d748813 to < 615d9d260c32bb678504ca96f29ae46f9d745155affected
  • e088a685eae94a0607b8f7b99949a0e14d748813 to < 0c99acbc8b6c6dd526ae475a48ee1897b61072fbaffected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References