CVE-2026-46053 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: rds: fix MR cleanup on copy error __rds_rdma_map() hands sg/pages ownership to the transport after get_mr() succeeds. If copying the generated cookie back to user space fails after that point, the error path must not free those resources again before dropping the MR reference. Remove the duplicate unpin/free from the put_user() failure branch so that MR teardown is handled only through the existing final cleanup path.
A vulnerability has been identified in the Linux kernel's Reliable Datagram Sockets (RDS) implementation, specifically within the RDMA mapping function. This issue arises because the function transfers ownership of scatter-gather (SG) pages to the transport layer after successfully obtaining a memory region (MR). If an error occurs while copying the generated cookie back to user space, the function fails to properly clean up the resources before releasing the MR reference. As a result, the error handling path can lead to a resource leak. This vulnerability affects the Linux kernel stable tree.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/033370ffb3c9c0264d19f8ba9ef769523266589a | kernel.org | Patch |
| https://git.kernel.org/stable/c/106dc689206610cfa2098f593fdd1e020c997835 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8141a2dc70080eda1aedc0389ed2db2b292af5bd | kernel.org | Patch |
| https://git.kernel.org/stable/c/8fdbb6262a4a3ed44a0830a7793903b54bb27bdc | kernel.org | Patch |
| https://git.kernel.org/stable/c/91a44b406bc1f9e1c5da0cb7d0d5991b43b79147 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b3cb8cae530b2727d8245684148bb49425f6765c | kernel.org | Patch |
| https://git.kernel.org/stable/c/d95cea9298be1ba8876e3f156be96d3a492085ca | kernel.org | Patch |
| https://git.kernel.org/stable/c/ec55a86f7fba7d9111df94b9c11a4755ed492995 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.6.1, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.140 >= 6.7, < 6.12.86 >= 6.13, < 6.18.27 >= 6.19, < 7.0.4 5.6 - 5.6 rc3 5.6 rc4 5.6 rc5 5.6 rc6 5.6 rc7 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 16, 2026 | Initial Analysis | [email protected] |
| Jun 1, 2026 | CVE Modified | kernel.org |
| May 30, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |