CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
In the Linux kernel, the following vulnerability has been resolved:
RDMA/vmwpvrdma: Fix double free on pvrdmaallocucontext() error path
Sashiko points out that pvrdmauarfree() is already called within pvrdmadeallocucontext(), so calling it before triggers a double free.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46189?
CVE-2026-46189 has a risk score of 31, indicating a significant potential impact.
What type of vulnerability is CVE-2026-46189?
CVE-2026-46189 is classified as a double free vulnerability in the Linux kernel.
How do I fix CVE-2026-46189?
To fix CVE-2026-46189, it is recommended to update the Linux kernel to the patched version that resolves the double free issue.
Which software is affected by CVE-2026-46189?
CVE-2026-46189 affects the Linux kernel, specifically the RDMA/vmw_pvrdma component.
What can happen if CVE-2026-46189 is exploited?
Exploitation of CVE-2026-46189 could lead to memory corruption and potentially allow an attacker to execute arbitrary code.