CVE-2026-46178
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points out that mlx4_srq_alloc() was not undone during error unwind, add the missing call to mlx4_srq_free().
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.13%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points out that mlx4_srq_alloc() was not undone during error unwind, add the missing call to mlx4_srq_free().
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.13% probability · 3th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/0be6ae614ca7fa53e7389e3c7462ed20abbd4192Patch
- https://git.kernel.org/stable/c/0dbd619716fb07b7de1acd64fec673ee6e1adde7Patch
- https://git.kernel.org/stable/c/388617f44d81604a760742a0b5de292d411e63e3Patch
- https://git.kernel.org/stable/c/53fd4c03558672ccb167754fbacbf045c7ab335cPatch
- https://git.kernel.org/stable/c/5b3b220d54e6a3d77380cb7caa1ef79cb8f4fc94Patch
- https://git.kernel.org/stable/c/c54c7e4cb679c0aaa1cb489b9c3f2cd98e63a44cPatch
- https://git.kernel.org/stable/c/c5dc30da990045105c9762248d23076223e7878aPatch
- https://git.kernel.org/stable/c/e01b8c9286c470b71a38acd320106f2c4f2826a1Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.