CVE-2026-46127
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A vulnerability has been identified and resolved in the Linux kernel. The issue concerns a faulty reference to the uctx pointer in the ocrdma_copy_pd_uresp() function during error handling, which can lead to system crashes.
Risk Assessment
This vulnerability may lead to system crashes, impacting the availability of services within the organization. Unpatched systems could be susceptible to unexpected downtimes.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability. Additionally, monitor systems for potential issues related to crashes.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() Sashiko points out that pd->uctx isn't initialized until late in the function so all these error flow references are NULL and will crash. Use the uctx that isn't NULL.