🛡️ CVE-2026-46181 — kernel

🟠 CVSS 7.8 — High ✅ No Known Exploit NVD

7.8

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

Sashiko points out the radix_tree itself is RCU safe, but nothing ever

frees the mlx4_srq struct with RCU, and it isn't even accessed within the

RCU critical section. It also will crash if an event is delivered before

the srq object is finished initializing.

Use the spinlock since it isn't easy to make RCU work, use

refcount_inc_not_zero() to protect against partially initialized objects,

and order the refcount_set() to be after the srq is fully initialized.

How this vulnerability can be exploited

This issue can be reached with local access to the system, attack complexity is low, an attacker needs low-level privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality high, integrity high, availability high.

CVSS metrics in full

The score comes from this vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector: Local — a local account, shell or session on the host is needed.
Attack complexity: Low — the attack works reliably, with no preparation.
Privileges required: Low — an ordinary user account is enough.
User interaction: None — nobody has to be tricked into anything.
Scope: Unchanged — the damage stays inside the vulnerable component.
Confidentiality impact: High — total loss, or loss the attacker controls.
Integrity impact: High — total loss, or loss the attacker controls.
Availability impact: High — total loss, or loss the attacker controls.

Affected software

CVE-2026-46181 is recorded against 2 packages.

kernel (from 6.19.0 up to 7.0.7)
linux-kernel

Timeline and source

Published on 28 May 2026 and last revised on 12 August 2026. No public exploit is currently recorded for this entry. A vendor advisory or fix has been published. Record sourced from NVD.

References

Other advisories for this package

kernel has other advisories on record. If you are patching this one, these are worth checking on the same host:

AZL-79538 (published 9 Mar 2026)
AZL-78650 (published 4 Mar 2026)
AZL-78647 (published 4 Mar 2026)
AZL-78632 (published 4 Mar 2026)
AZL-77880 (published 18 Feb 2026)
AZL-77877 (published 18 Feb 2026)
AZL-77874 (published 18 Feb 2026)
AZL-77858 (published 18 Feb 2026)

CVE-2026-46181 on other distributions

Each distribution ships its own build and its own fixed version. Pick the one you run:

BellSoft — BELL-CVE-2026-46181 Debian — DEBIAN-CVE-2026-46181 Debian 11 (Root.io) — ROOT-OS-DEBIAN-11-CVE-2026-46181 Debian 12 (Root.io) — ROOT-OS-DEBIAN-12-CVE-2026-46181 Debian 13 (Root.io) — ROOT-OS-DEBIAN-13-CVE-2026-46181 Ubuntu 22.04 (Root.io) — ROOT-OS-UBUNTU-2204-CVE-2026-46181 Ubuntu 24.04 (Root.io) — ROOT-OS-UBUNTU-2404-CVE-2026-46181 Ubuntu — UBUNTU-CVE-2026-46181

Details

Severity High

CVSS Score 7.8

CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE N/A

Public Exploit ✅ No

Source NVD

Published 2026-05-28

Updated 2026-08-20

Modified 2026-08-12

Fix URL https://git.kernel.org/stable/c/1e2a44875b6afb4add1115f7f3351dcbeb6f273d

Affected Packages

Software	From version	Fixed in
kernel	6.19.0	7.0.7
linux-kernel	—	—

References

WEB https://git.kernel.org/stable/c/1e2a44875b6afb4add1115f7f3351dcbeb6f273d

WEB https://git.kernel.org/stable/c/8b7833f3bce35cb0d01c1503781523c099c675f0

WEB https://git.kernel.org/stable/c/c9341307ea16b9395c2e4c9c94d8499d91fe31d0

WEB https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46181.json

ADVISORY https://access.redhat.com/errata/RHSA-2026:25120

ADVISORY https://access.redhat.com/errata/RHSA-2026:25121

ADVISORY https://access.redhat.com/errata/RHSA-2026:25217

ADVISORY https://access.redhat.com/errata/RHSA-2026:33900

ADVISORY https://access.redhat.com/errata/RHSA-2026:34094

ADVISORY https://access.redhat.com/errata/RHSA-2026:34095

ADVISORY https://access.redhat.com/errata/RHSA-2026:34443

ADVISORY https://access.redhat.com/errata/RHSA-2026:35863

ADVISORY https://access.redhat.com/errata/RHSA-2026:35894

ADVISORY https://access.redhat.com/errata/RHSA-2026:35896

ADVISORY https://access.redhat.com/errata/RHSA-2026:36216

ADVISORY https://access.redhat.com/errata/RHSA-2026:41236

ADVISORY https://access.redhat.com/security/cve/CVE-2026-46181

ADVISORY https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46181.json

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-46181

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2482532

PACKAGE https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

🔗 NVD 🔗 Mitre ✅ Fix / Advisory

Similar Threats

Unknown ALBA-2026:39332
Unknown ALSA-2023:1703
Unknown ALSA-2023:1566
Unknown ALSA-2023:1470
Unknown ALSA-2023:0951

Site Security Check

Is kernel part of your stack?

CVE-2026-46181 is rated CVSS 7.8 High. BotEraser scans your installation against known CVE records and tells you whether this vulnerability applies to the versions you actually run.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ CVE-2026-46181 — kernel

Description

How this vulnerability can be exploited

CVSS metrics in full

Affected software

Timeline and source

References

Other advisories for this package

CVE-2026-46181 on other distributions

Is kernel part of your stack?

Browse related advisories

Company

Resources

Services

Trusted

Subscribe