https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T15:41:19.287983+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-46117 CVE-2026-46117 — RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() 2026-10-01T15:41:19.417377+00:00

Affected: Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel.

Just reject it outright and fail the QP creation.