Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c15d7802a42402a87880a17eee89ff023e49ecc0 to < 9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71affectedc15d7802a42402a87880a17eee89ff023e49ecc0 to < 9ef65af26b2a6738bf15812042e84b3112402d3aaffectedc15d7802a42402a87880a17eee89ff023e49ecc0 to < db991ba50087ad99fa12a2c483aa3be19671ea73affectedc15d7802a42402a87880a17eee89ff023e49ecc0 to < 159f2efabc89d3f931d38f2d35876535d4abf0a3affected
Linux Linux
Default version status: affected
6.8affected0 to < 6.8unaffected6.12.91 to ≤ 6.12.*unaffected6.18.30 to ≤ 6.18.*unaffected7.0.7 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71 ↗
- https://git.kernel.org/stable/c/9ef65af26b2a6738bf15812042e84b3112402d3a ↗
- https://git.kernel.org/stable/c/db991ba50087ad99fa12a2c483aa3be19671ea73 ↗
- https://git.kernel.org/stable/c/159f2efabc89d3f931d38f2d35876535d4abf0a3 ↗
- https://access.redhat.com/security/cve/CVE-2026-46117 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2482576 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46117.json ↗
- https://access.redhat.com/errata/RHSA-2026:30129 ↗
- https://access.redhat.com/errata/RHSA-2026:65712 ↗
- https://access.redhat.com/errata/RHSA-2026:67720 ↗
- https://access.redhat.com/errata/RHSA-2026:27789 ↗
- https://access.redhat.com/errata/RHSA-2026:42552 ↗
- https://access.redhat.com/errata/RHSA-2026:42550 ↗