CVE-2026-46178
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability in the Linux kernel related to resource leak in mlx4_ib_create_srq() has been fixed. The issue was that mlx4_srq_free() was not called during error unwind, leading to resource leaks.
Risk Assessment
Resource leaks can lead to performance degradation and potential exhaustion of available resources, impacting the stability of applications using RDMA.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and prevent potential performance issues.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points out that mlx4_srq_alloc() was not undone during error unwind, add the missing call to mlx4_srq_free().