Security Advisory

CVE-2026-46145

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-28 09:36:01
Last updated 2026-07-15 00:51:25
Assigner Linux
CVSS score 7.8
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_key_len comes from a uAPI structure and is blindly passed to memcpy, allowing the userspace to trash kernel memory. Bounds check it so the memcpy cannot overflow.