<Vulnerability name="CVE-2026-46181">
    <DocumentDistribution xml:lang="en">Copyright © 2012 Red Hat, Inc. All rights reserved.</DocumentDistribution>
    <ThreatSeverity>Important</ThreatSeverity>
    <PublicDate>2026-05-28T00:00:00</PublicDate>
    <Bugzilla id="2482532" url="https://bugzilla.redhat.com/show_bug.cgi?id=2482532" xml:lang="en:us">
kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
    </Bugzilla>
    <CVSS3 status="verified">
        <CVSS3BaseScore>7.0</CVSS3BaseScore>
        <CVSS3ScoringVector>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</CVSS3ScoringVector>
    </CVSS3>
    <CWE>CWE-366</CWE>
    <Details xml:lang="en:us" source="Mitre">
In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

Sashiko points out the radix_tree itself is RCU safe, but nothing ever
frees the mlx4_srq struct with RCU, and it isn't even accessed within the
RCU critical section. It also will crash if an event is delivered before
the srq object is finished initializing.

Use the spinlock since it isn't easy to make RCU work, use
refcount_inc_not_zero() to protect against partially initialized objects,
and order the refcount_set() to be after the srq is fully initialized.
    </Details>
    <Details xml:lang="en:us" source="Red Hat">
A flaw was found in the Linux kernel's RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update (RCU) in the `mlx4_srq_event()` function. An attacker could potentially trigger an event before the `srq` object is fully initialized, leading to a system crash. This could result in a Denial of Service (DoS) for the affected system.
    </Details>
    <AffectedRelease cpe="cpe:/a:redhat:rhel_extras_rt_els:7">
        <ProductName>Red Hat Enterprise Linux 7 Extended Lifecycle Support</ProductName>
        <ReleaseDate>2026-07-17T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:41236">RHSA-2026:41236</Advisory>
        <Package name="kernel-rt">kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_els:7">
        <ProductName>Red Hat Enterprise Linux 7 Extended Lifecycle Support</ProductName>
        <ReleaseDate>2026-07-07T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:36216">RHSA-2026:36216</Advisory>
        <Package name="kernel">kernel-0:3.10.0-1160.155.1.el7</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:enterprise_linux:8::nfv">
        <ProductName>Red Hat Enterprise Linux 8</ProductName>
        <ReleaseDate>2026-06-10T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:25120">RHSA-2026:25120</Advisory>
        <Package name="kernel-rt">kernel-rt-0:4.18.0-553.132.1.rt7.473.el8_10</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:enterprise_linux:8">
        <ProductName>Red Hat Enterprise Linux 8</ProductName>
        <ReleaseDate>2026-06-10T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:25121">RHSA-2026:25121</Advisory>
        <Package name="kernel">kernel-0:4.18.0-553.132.1.el8_10</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_aus:8.4">
        <ProductName>Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support</ProductName>
        <ReleaseDate>2026-07-06T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:35896">RHSA-2026:35896</Advisory>
        <Package name="kernel">kernel-0:4.18.0-305.197.1.el8_4</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_eus_long_life:8.4">
        <ProductName>Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On</ProductName>
        <ReleaseDate>2026-07-06T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:35896">RHSA-2026:35896</Advisory>
        <Package name="kernel">kernel-0:4.18.0-305.197.1.el8_4</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_aus:8.6">
        <ProductName>Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support</ProductName>
        <ReleaseDate>2026-07-06T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:35894">RHSA-2026:35894</Advisory>
        <Package name="kernel">kernel-0:4.18.0-372.199.1.el8_6</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_eus_long_life:8.6">
        <ProductName>Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On</ProductName>
        <ReleaseDate>2026-07-06T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:35894">RHSA-2026:35894</Advisory>
        <Package name="kernel">kernel-0:4.18.0-372.199.1.el8_6</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_tus:8.8">
        <ProductName>Red Hat Enterprise Linux 8.8 Telecommunications Update Service</ProductName>
        <ReleaseDate>2026-07-06T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:35863">RHSA-2026:35863</Advisory>
        <Package name="kernel">kernel-0:4.18.0-477.150.1.el8_8</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_e4s:8.8">
        <ProductName>Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions</ProductName>
        <ReleaseDate>2026-07-06T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:35863">RHSA-2026:35863</Advisory>
        <Package name="kernel">kernel-0:4.18.0-477.150.1.el8_8</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:enterprise_linux:9">
        <ProductName>Red Hat Enterprise Linux 9</ProductName>
        <ReleaseDate>2026-06-11T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:25217">RHSA-2026:25217</Advisory>
        <Package name="kernel">kernel-0:5.14.0-687.15.1.el9_8</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:enterprise_linux:9">
        <ProductName>Red Hat Enterprise Linux 9</ProductName>
        <ReleaseDate>2026-06-11T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:25217">RHSA-2026:25217</Advisory>
        <Package name="kernel">kernel-0:5.14.0-687.15.1.el9_8</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:rhel_e4s:9.2">
        <ProductName>Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions</ProductName>
        <ReleaseDate>2026-07-01T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:34095">RHSA-2026:34095</Advisory>
        <Package name="kernel">kernel-0:5.14.0-284.178.1.el9_2</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:rhel_e4s:9.2::nfv">
        <ProductName>Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions</ProductName>
        <ReleaseDate>2026-07-01T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:33900">RHSA-2026:33900</Advisory>
        <Package name="kernel-rt">kernel-rt-0:5.14.0-284.178.1.rt14.463.el9_2</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:rhel_e4s:9.4">
        <ProductName>Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions</ProductName>
        <ReleaseDate>2026-07-01T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:34443">RHSA-2026:34443</Advisory>
        <Package name="kernel">kernel-0:5.14.0-427.135.1.el9_4</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:rhel_eus:9.6">
        <ProductName>Red Hat Enterprise Linux 9.6 Extended Update Support</ProductName>
        <ReleaseDate>2026-07-01T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:34094">RHSA-2026:34094</Advisory>
        <Package name="kernel">kernel-0:5.14.0-570.125.1.el9_6</Package>
    </AffectedRelease>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:10">
        <ProductName>Red Hat Enterprise Linux 10</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:6">
        <ProductName>Red Hat Enterprise Linux 6</ProductName>
        <FixState>Under investigation</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:9">
        <ProductName>Red Hat Enterprise Linux 9</ProductName>
        <FixState>Affected</FixState>
        <PackageName>kernel-rt</PackageName>
    </PackageState>
    <References xml:lang="en:us">
https://www.cve.org/CVERecord?id=CVE-2026-46181
https://nvd.nist.gov/vuln/detail/CVE-2026-46181
https://lore.kernel.org/linux-cve-announce/2026052829-CVE-2026-46181-ecff@gregkh/T
    </References>
</Vulnerability>