What’s Vulnerable › Vulnerabilities

CVE-2026-46178: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-28 · updated 2026-10-19
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points out that mlx4_srq_alloc() was not undone during error unwind, add the missing call to mlx4_srq_free().

Affected products

• Linux kernel: from 2.6.22 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.88; from 6.13 before 6.18.30 — fixed in 5.10.258, 5.15.209, 6.1.175, 6.12.88, 6.18.30, 6.6.140

How to fix

Upgrade to a fixed version: Linux kernel 5.10.258, 5.15.209, 6.1.175, 6.12.88. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0be6ae614ca7fa53e7389e3c7462ed20abbd4192
• https://git.kernel.org/stable/c/0dbd619716fb07b7de1acd64fec673ee6e1adde7
• https://git.kernel.org/stable/c/388617f44d81604a760742a0b5de292d411e63e3
• https://git.kernel.org/stable/c/53fd4c03558672ccb167754fbacbf045c7ab335c
• https://git.kernel.org/stable/c/5b3b220d54e6a3d77380cb7caa1ef79cb8f4fc94
• https://git.kernel.org/stable/c/c54c7e4cb679c0aaa1cb489b9c3f2cd98e63a44c
• https://git.kernel.org/stable/c/c5dc30da990045105c9762248d23076223e7878a
• https://git.kernel.org/stable/c/e01b8c9286c470b71a38acd320106f2c4f2826a1

Get alerted when CVE-2026-46178 or the next vulnerability affects your stack