CVE-2026-46181

Advisory lineage Upstream: 0 Downstream: 30
Analyzed
Published: 28 May 2026, 09:36
Last modified:20 Jul 2026, 12:04

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.1 (cve.org)
EPSS Score
0.11% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 May 2026, 09:36
Published
Vulnerability first disclosed
20 Jul 2026, 12:04
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU safe, but nothing ever frees the mlx4_srq struct with RCU, and it isn't even accessed within the RCU critical section. It also will crash if an event is delivered before the srq object is finished initializing. Use the spinlock since it isn't easy to make RCU work, use refcount_inc_not_zero() to protect against partially initialized objects, and order the refcount_set() to be after the srq is fully initialized.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.11%• Percentile: 2%

Techniques & Countermeasures

  • CWE-366•Race Condition within a Thread

    If two threads of execution use a resource simultaneously, there exists the possibility that resources may be used while invalid, in turn making the state of execution undefined.

Affected Systems

  • linux•linux

    ≥ 30353bfc43a1602c020f31d95cf27182ffd23824, < 1e2a44875b6afb4add1115f7f3351dcbeb6f273d | ≥ 30353bfc43a1602c020f31d95cf27182ffd23824, < 8b7833f3bce35cb0d01c1503781523c099c675f0 | ≥ 30353bfc43a1602c020f31d95cf27182ffd23824, < c9341307ea16b9395c2e4c9c94d8499d91fe31d0 | 4.9

  • linux•linux kernel

    ≥ 4.9, < 6.18.30 | ≥ 6.19, < 7.0.7 | 7.1:rc1 | 7.1:rc2

References (18)