LiveActive security incident?Get immediate response
CVE Record

CVE-2026-46144: RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() Sashiko points out that mana_ib_cfg_vport_steering() is leaked, the normal destroy path cleans it up.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

This is a Linux kernel defect in the RDMA MANA driver. The source says an error path leaks steering configuration that the normal destroy path cleans up. The business risk is unclear because no CVSS, impact rating, exploitation evidence, or distribution advisory is included.

Executive priority

Track and patch through normal kernel update processes, with higher priority for Azure or RDMA-enabled Linux workloads. Escalate only if vendor advisories later assign high severity, confirm denial-of-service impact, or report exploitation.

Technical view

CVE-2026-46144 concerns mana_ib_create_qp_rss() in Linux RDMA/mana. On a failure path, mana_ib_cfg_vport_steering() state is leaked instead of unwound. Stable kernel commits are referenced as fixes, but the provided data does not define practical exploitability or full package-level version mapping.

Likely exposure

Likely limited to Linux systems using affected kernels with the RDMA MANA driver path, commonly relevant where Microsoft Azure Network Adapter RDMA support is enabled. Systems without this driver or feature path may not be exposed, but confirm through kernel configuration and vendor package data.

Exploitation context

The bundle does not cite active exploitation, KEV listing, public exploit details, or attacker prerequisites. Treat this as a kernel maintenance vulnerability with uncertain security impact until Linux distribution advisories or vendor kernel notes provide more context.

Researcher notes

The provided evidence supports a resource leak on an error-unwind path, not a confirmed exploit primitive. The affected version list appears incomplete or machine-derived, so rely on distribution backports and the referenced stable commits for precise remediation mapping.

Mitigation direction

  • Check Linux distribution advisories for CVE-2026-46144 package status.
  • Update affected kernels to builds containing the referenced stable fixes.
  • Prioritize hosts using RDMA MANA or Azure RDMA networking.
  • If patching is delayed, review vendor guidance for driver-specific mitigations.

Validation and detection

  • Inventory kernel versions across Linux hosts.
  • Identify systems with RDMA MANA driver support enabled or loaded.
  • Compare installed kernel changelogs against referenced stable commits.
  • Confirm vendor security trackers mark CVE-2026-46144 fixed.
  • Monitor kernel logs for RDMA MANA allocation or cleanup errors.
Prepared
Confidence
medium
Sources
7

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2026-46144 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
0ADP providers
6Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux0266a177631d4c6b963b5b12dd986a8c5abdbf06, 0266a177631d4c6b963b5b12dd986a8c5abdbf06, 0266a177631d4c6b963b5b12dd986a8c5abdbf06, 0266a177631d4c6b963b5b12dd986a8c5abdbf06, 0266a177631d4c6b963b5b12dd986a8c5abdbf06unaffected
LinuxLinux6.2, 0, 6.6.141, 6.12.88, 6.18.30, 7.0.7, 7.1affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.