Review reviewHigh

CVE-2026-46117

Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.

CVSS: 7.8
EPSS: 0.13%
CISA KEV: Not listed
Published: 2026.05.28

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.13%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8
Affected versions: >= c15d7802a42402a87880a17eee89ff023e49ecc0 < 9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71, >= c15d7802a42402a87880a17eee89ff023e49ecc0 < 9ef65af26b2a6738bf15812042e84b3112402d3a, >= c15d7802a42402a87880a17eee89ff023e49ecc0 < db991ba50087ad99fa12a2c483aa3be19671ea73, >= c15d7802a42402a87880a17eee89ff023e49ecc0 < 159f2efabc89d3f931d38f2d35876535d4abf0a3, >= 6.8, >= 6.8 < 6.12.91, >= 6.13 < 6.18.30, >= 6.19 < 7.0.7, 7.1
Fixed versions: 6.12.91, 6.18.30, 7.0.7

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8 and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-1288, CWE-617