CVE-2026-46265

HighCVSS 7.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix WQ_MEM_RECLAIM warning

When sunrpc is used, if a reset triggered, our wq may lead the following trace:

workqueue: WQ_MEM_RECLAIM xprtiod:xprt_rdma_connect_worker [rpcrdma] is flushing !WQ_MEM_RECLAIM hns_roce_irq_workq:flush_work_handle [hns_roce_hw_v2] WARNING: CPU: 0 PID: 8250 at kernel/workqueue.c:2644 check_flush_dependency+0xe0/0x144 Call trace: check_flush_dependency+0xe0/0x144 start_flush_work.constprop.0+0x1d0/0x2f0 __flush_work.isra.0+0x40/0xb0 flush_work+0x14/0x30 hns_roce_v2_destroy_qp+0xac/0x1e0 [hns_roce_hw_v2] ib_destroy_qp_user+0x9c/0x2b4 rdma_destroy_qp+0x34/0xb0 rpcrdma_ep_destroy+0x28/0xcc [rpcrdma] rpcrdma_ep_put+0x74/0xb4 [rpcrdma] rpcrdma_xprt_disconnect+0x1d8/0x260 [rpcrdma] xprt_rdma_connect_worker+0xc0/0x120 [rpcrdma] process_one_work+0x1cc/0x4d0 worker_thread+0x154/0x414 kthread+0x104/0x144 ret_from_fork+0x10/0x18

Since QP destruction frees memory, this wq should have the WQ_MEM_RECLAIM.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= ffd541d45726341c1830ff595fd7352b6d1cfbcd, < 31b22ca4f5ab8c495fd8bb44c06573f1fb7833a2; >= ffd541d45726341c1830ff595fd7352b6d1cfbcd, < 5fb5028a7a80c2f8fd1e06cea7c4a0af1a58f9ef; >= ffd541d45726341c1830ff595fd7352b6d1cfbcd, < 12761bd0ae16a80f237c2a65ab1b1064076cc74a; >= ffd541d45726341c1830ff595fd7352b6d1cfbcd, < 70a5eb757ace5bd627a36f04d871eaf85def424d; >= ffd541d45726341c1830ff595fd7352b6d1cfbcd, < 562c96b1393da2df3ea62173c84117b39da353b9; >= ffd541d45726341c1830ff595fd7352b6d1cfbcd, < 0cbec8b49270f3f0600b8e3ef5e8f0d233dcea27; >= ffd541d45726341c1830ff595fd7352b6d1cfbcd, < c5ef9a1bcf5b597695d9c2e6ac452e9f89521862; >= ffd541d45726341c1830ff595fd7352b6d1cfbcd, < c0a26bbd3f99b7b03f072e3409aff4e6ec8af6f6
LinuxLinux5.7

References

Timeline

Published
Jun 3, 2026
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-462669.1In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou ZhaCVE-2026-462677.8In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlcCVE-2026-462685.5In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition Commit b7e282378CVE-2026-462695.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing deviceCVE-2026-46277.2A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1. Affected is the function handler_update_system_time of the file libdeuCVE-2026-462708.4In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in power_supply_changed() UsCVE-2026-462717.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads only on primary link In case of multi-liCVE-2026-462724.7In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fix race condition between sysfs and perf mode WheCVE-2026-462738.6In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adaptersCVE-2026-462747.8In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_wq_remove_pending() CVE-2026-462757.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init patCVE-2026-462765.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix zero-size GDS range init on RDNA4 RDNA4 (GFX 12) hardw
CVE-2026-46265: High severity, CVSS 7.5 | Vulnix