CVE-2026-46178: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx4: Fix resource leak on error in mlx4ibcreatesrq()
Sashiko points out that mlx4srqalloc() was not undone during error unwind, add the missing call to mlx4srqfree().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Compensating control
Apply the kernel fix for “RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()” so that mlx4_srq_alloc() is properly unwound on error by adding the missing call to mlx4_srq_free().
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46178?
The severity of CVE-2026-46178 is high, with a base score of 7.8.
What are the potential impacts of CVE-2026-46178?
CVE-2026-46178 can lead to a resource leak which may affect system performance and stability.
How do I fix CVE-2026-46178?
To fix CVE-2026-46178, update your Linux kernel to the latest version that addresses this vulnerability.
Which Linux components are affected by CVE-2026-46178?
CVE-2026-46178 affects the RDMA/mlx4 driver within the Linux kernel.
Is CVE-2026-46178 a critical vulnerability?
While CVE-2026-46178 is not classified as critical, it is still considered a high-severity vulnerability due to its potential impacts.