7.8
High
CVE-2026-46181 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()…
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU safe, but nothing ever frees the mlx4_srq struct with RCU, and it isn't even accessed within the RCU critical section. It also will crash if an event is delivered before the srq object is finished initializing. Use the spinlock since it isn't easy to make RCU work, use refcount_inc_not_zero() to protect against partially initialized objects, and order the refcount_set() to be after the srq is fully initialized.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 7.1 | earliest → < 7.1 | 7.1 |
| Linux 7.0 | earliest → < 7.0.7 | 7.0.7 |
| Linux 6.18 | earliest → < 6.18.30 | 6.18.30 |
| Linux 6.12 | earliest → < 6.12.114 | 6.12.114 |
| Linux 6.6 | earliest → < 6.6.160 | 6.6.160 |
| Linux 6.1 | earliest → < 6.1.191 | 6.1.191 |
| Linux | 4.9 | No fix stated |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat Enterprise Linux BaseOS (v. 8) | Versions not published |
Show the 43 other branches Hide the 43 other branches
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated