CVE-2026-46126 | BDVDB-2026-336246 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() Sashiko points out there are two bugs here in the error unwind flow, both related to how the WQ table is unwound. First there is a double i-- on the first failure path due to the while loop having a i--, remove it. Second if mana_ib_install_cq_cb() fails then mana_create_wq_obj() is not undone due to the above i--.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-05-28Record published in the CVE List.
2. Version 22026-11-06Most recent update recorded in the CVE List.