Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-46181

Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/05/2026
Última modificación:
30/05/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()<br /> <br /> Sashiko points out the radix_tree itself is RCU safe, but nothing ever<br /> frees the mlx4_srq struct with RCU, and it isn&amp;#39;t even accessed within the<br /> RCU critical section. It also will crash if an event is delivered before<br /> the srq object is finished initializing.<br /> <br /> Use the spinlock since it isn&amp;#39;t easy to make RCU work, use<br /> refcount_inc_not_zero() to protect against partially initialized objects,<br /> and order the refcount_set() to be after the srq is fully initialized.