CVE-2026-46112 RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
A race condition in the Linux kernel RDMA driver allows memory corruption due to missing locks, potentially leading to privilege escalation or code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-46112?
CVE-2026-46112 is a high-severity vulnerability in Linux kernel, published on 28 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
Sashiko points out that hns_roce_qp_remove() requires the caller to hold locks. The error flow in hns_roce_create_qp_common() doesn't hold those locks for the error unwind so it risks corrupting memory.
Grab the same locks the other two callers use.
Weakness: CWE-667
Which versions are affected by CVE-2026-46112?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-46112?
Apply the vendor's patch.
Is CVE-2026-46112 being exploited?
There is no known exploitation of CVE-2026-46112 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-89118, BELL-CVE-2026-46112, DEBIAN-CVE-2026-46112, GHSA-qv92-qxr2-xv3j, ROOT-OS-DEBIAN-11-CVE-2026-46112, ROOT-OS-DEBIAN-12-CVE-2026-46112 and 3 more.