CVE-2026-46145

HIGH EPSS 3.6%
Published May 28, 20261mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published May 28, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_key_len comes from a uAPI structure and is blindly passed to memcpy, allowing the userspace to trash kernel memory. Bounds check it so the memcpy cannot overflow.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
3.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel*≥6.2  –  <6.6.141
linuxlinux_kernel*≥6.7  –  <6.12.88
linuxlinux_kernel*≥6.13  –  <6.18.30
linuxlinux_kernel*≥6.19  –  <7.0.7
linuxlinux_kernel7.1any
linuxlinux_kernel7.1any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/012796f9541fcd0c1fa8ae4da7eb4d83931ef838
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/11c1431d641e0e4e0529e96957995820600c7287
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6dd2d4ad9c8429523b1c220c5132bd551c006425
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7d7c9f0fcd19c4d2f0164347c58d49cafa961b72
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7d94f155f354b961c598f71bafa804dceded513f
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/012796f9541fcd0c1fa8ae4da7eb4d83931ef838
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/11c1431d641e0e4e0529e96957995820600c7287
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6dd2d4ad9c8429523b1c220c5132bd551c006425
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7d7c9f0fcd19c4d2f0164347c58d49cafa961b72
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7d94f155f354b961c598f71bafa804dceded513f
    Patch