Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-46145

RDMA/mana: Validate rx_hash_key_len

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_key_len comes from a uAPI structure and is blindly passed to memcpy, allowing the userspace to trash kernel memory. Bounds check it so the memcpy cannot overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to < 7d7c9f0fcd19c4d2f0164347c58d49cafa961b72affected
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to < 11c1431d641e0e4e0529e96957995820600c7287affected
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to < 012796f9541fcd0c1fa8ae4da7eb4d83931ef838affected
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to < 7d94f155f354b961c598f71bafa804dceded513faffected
  • 0266a177631d4c6b963b5b12dd986a8c5abdbf06 to < 6dd2d4ad9c8429523b1c220c5132bd551c006425affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References