CVE-2026-46178: linux
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2026-46178DEBIAN-CVE-2026-46178
Published 28-05-2026Last modified 19-10-2026
Vulnerability summary
CVE-2026-46178 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.6% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.18%
0%100%
Low · +0.05 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 51 · Related 51OPENSUSE-SU-2026:10954-1OPENSUSE-SU-2026:21388-1SUSE-SU-2026:22742-1SUSE-SU-2026:22769-1SUSE-SU-2026:22809-1SUSE-SU-2026:22810-1SUSE-SU-2026:22812-1SUSE-SU-2026:22835-1SUSE-SU-2026:22903-1SUSE-SU-2026:22904-1SUSE-SU-2026:3130-1SUSE-SU-2026:3166-1SUSE-SU-2026:3594-1USN-8566-1USN-8567-1USN-8568-1USN-8569-1USN-8574-1USN-8574-2USN-8574-3USN-8575-1USN-8575-2USN-8575-3USN-8576-1USN-8576-2USN-8593-1USN-8595-1USN-8595-2USN-8595-3USN-8596-1USN-8597-1USN-8603-1USN-8606-1USN-8607-1USN-8608-1USN-8609-1USN-8610-1USN-8618-1USN-8619-1USN-8620-1USN-8620-2USN-8620-3USN-8620-4USN-8663-1USN-8664-1USN-8665-1USN-8668-1USN-8668-2USN-8728-1USN-8728-2USN-8728-3
Timeline
- 28-05-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points out that mlx4_srq_alloc() was not undone during error unwind, add the missing call to mlx4_srq_free().
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
+0.05 pp
From 0.13% on 19-09-2026
19-09-202619-10-2026
EPSS score0.18%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-401Missing Release of Memory after Effective LifetimeThe product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
- CWE-772Missing Release of Resource after Effective LifetimeThe product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
Affected systems
Ubuntu166 products
- linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-136.136 | < 7.0.0-28.28
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1061.64 | < 7.0.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 225c7b1feef1b41170f7037a5b10a65cd8a42c54, < 53fd4c03558672ccb167754fbacbf045c7ab335c | ≥ 225c7b1feef1b41170f7037a5b10a65cd8a42c54, < 0be6ae614ca7fa53e7389e3c7462ed20abbd4192 | ≥ 225c7b1feef1b41170f7037a5b10a65cd8a42c54, < 5b3b220d54e6a3d77380cb7caa1ef79cb8f4fc94 | ≥ 225c7b1feef1b41170f7037a5b10a65cd8a42c54, < c5dc30da990045105c9762248d23076223e7878a | ≥ 225c7b1feef1b41170f7037a5b10a65cd8a42c54, < 0dbd619716fb07b7de1acd64fec673ee6e1adde7 | ≥ 225c7b1feef1b41170f7037a5b10a65cd8a42c54, < e01b8c9286c470b71a38acd320106f2c4f2826a1 | ≥ 225c7b1feef1b41170f7037a5b10a65cd8a42c54, < 388617f44d81604a760742a0b5de292d411e63e3 | ≥ 225c7b1feef1b41170f7037a5b10a65cd8a42c54, < c54c7e4cb679c0aaa1cb489b9c3f2cd98e63a44c | 2.6.22
- linux_kernel≥ 2.6.22, < 5.10.258 | ≥ 5.11, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.140 | ≥ 6.7, < 6.12.88 | ≥ 6.13, < 6.18.30 | ≥ 6.19, < 7.0.7 | 7.1:rc1 | 7.1:rc2
Debian1 product
- linux< 6.1.176-1 | < 6.12.88-1 | < 7.0.7-1
3 vendors · 169 products
