CVE-2026-46112RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
- 7.8HighCVSS base score
- 0.10%Exploitation in 30 daysEPSS · top 99% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() Sashiko points out that hns_roce_qp_remove() requires the caller to hold locks. The error flow in hns_roce_create_qp_common() doesn't hold those locks for the error unwind so it risks corrupting memory. Grab the same locks the other two callers use.
Timeline
ID reserved
By Linux
- 15 days later
· 15 days later
Published
- 2 months later
· 2 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Undergoing Analysis | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.10% · top 99% of all CVEs (14 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected e088a685eae94a0607b8f7b99949a0e14d748813 – < 1f0a3aa8b569d010316b427238222c5d899f9618
- affected e088a685eae94a0607b8f7b99949a0e14d748813 – < b6296ff2475fc95ee6ea1b528c4b385302808186
- affected e088a685eae94a0607b8f7b99949a0e14d748813 – < fb4ae739811d467409bd07d0e36cfd4140f3d26a
- affected e088a685eae94a0607b8f7b99949a0e14d748813 – < fcf6a832c0d5b2bc5398d6996c5570d3ee7993fb
- affected e088a685eae94a0607b8f7b99949a0e14d748813 – < 1912f78798505dc9c637081bbddfbf1c22494c49
- affected e088a685eae94a0607b8f7b99949a0e14d748813 – < 615d9d260c32bb678504ca96f29ae46f9d745155
- affected e088a685eae94a0607b8f7b99949a0e14d748813 – < 0c99acbc8b6c6dd526ae475a48ee1897b61072fb
- affected 4.17
- unaffected < 4.17
- unaffected 5.15.209 – ≤ 5.15.*
- unaffected 6.1.175 – ≤ 6.1.*
- unaffected 6.6.140 – ≤ 6.6.*
- unaffected 6.12.88 – ≤ 6.12.*
- unaffected 6.18.30 – ≤ 6.18.*
- unaffected 7.0.7 – ≤ 7.0.*
- unaffected 7.1 – ≤ *
References
References7
- https://git.kernel.org/stable/c/1f0a3aa8b569d010316b427238222c5d899f9618 (opens in a new tab)
- https://git.kernel.org/stable/c/b6296ff2475fc95ee6ea1b528c4b385302808186 (opens in a new tab)
- https://git.kernel.org/stable/c/fb4ae739811d467409bd07d0e36cfd4140f3d26a (opens in a new tab)
- https://git.kernel.org/stable/c/fcf6a832c0d5b2bc5398d6996c5570d3ee7993fb (opens in a new tab)
- https://git.kernel.org/stable/c/1912f78798505dc9c637081bbddfbf1c22494c49 (opens in a new tab)
- https://git.kernel.org/stable/c/615d9d260c32bb678504ca96f29ae46f9d745155 (opens in a new tab)
- https://git.kernel.org/stable/c/0c99acbc8b6c6dd526ae475a48ee1897b61072fb (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-32871 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-46112)Record last updated .