CVE-2026-46144

MediumCVSS 5.5

Published: 28/05/2026(UTC)Updated: 10/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.01%

2th percentile - higher than 2% of all known CVEs

Summary

A vulnerability in the Linux kernel related to the mana_ib_create_qp_rss() function has been fixed, which could lead to a leak in mana_ib_cfg_vport_steering().

Risk Assessment

Potential memory leaks could lead to unexpected system behavior and decreased stability.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() Sashiko points out that mana_ib_cfg_vport_steering() is leaked, the normal destroy path cleans it up.