CVE-2026-46112: RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hns: Fix unlocked call to hnsroceqpremove()
Sashiko points out that hnsroceqpremove() requires the caller to hold locks. The error flow in hnsrocecreateqpcommon() doesn't hold those locks for the error unwind so it risks corrupting memory.
Grab the same locks the other two callers use.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46112?
The severity of CVE-2026-46112 is rated as high with a CVSS score of 7.8.
How do I fix CVE-2026-46112?
To fix CVE-2026-46112, update your Linux kernel to the latest patched version that addresses this vulnerability.
What systems are affected by CVE-2026-46112?
CVE-2026-46112 affects various versions of the Linux kernel, including those run by The Linux Foundation and Microsoft.
What does CVE-2026-46112 relate to?
CVE-2026-46112 relates to an issue with the RDMA subsystem in the Linux kernel where an unlocked call to hns_roce_qp_remove() could lead to potential security vulnerabilities.
What could happen if CVE-2026-46112 is exploited?
If exploited, CVE-2026-46112 could allow for a denial of service or potentially allow an attacker to gain unauthorized access to system resources.