جزئیات آسیب‌پذیری
CVE-2026-46181
Linux LinuxRed Hat Enterprise Linux 9
RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
CVSS 3.1
7.8بالا
شرح رسمی (انگلیسی)
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU safe, but nothing ever frees the mlx4_srq struct with RCU, and it isn't even accessed within the RCU critical section. It also will crash if an event is delivered before the srq object is finished initializing. Use the spinlock since it isn't easy to make RCU work, use refcount_inc_not_zero() to protect against partially initialized objects, and order the refcount_set() to be after the srq is fully initialized.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 7.0بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Linux | Linux | 4.9 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 30353bfc43a1602c020f31d95cf27182ffd23824 ≤ v < 2d8b30b496bc53e961ba7415fd629fc27813017c | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 30353bfc43a1602c020f31d95cf27182ffd23824 ≤ v < f0dbd9355ce1e93808541260c7ffab7956df9233 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 30353bfc43a1602c020f31d95cf27182ffd23824 ≤ v < 1e2a44875b6afb4add1115f7f3351dcbeb6f273d | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 30353bfc43a1602c020f31d95cf27182ffd23824 ≤ v < 8b7833f3bce35cb0d01c1503781523c099c675f0 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 30353bfc43a1602c020f31d95cf27182ffd23824 ≤ v < c9341307ea16b9395c2e4c9c94d8499d91fe31d0 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 30353bfc43a1602c020f31d95cf27182ffd23824 ≤ v < 654aeddbc6e0f6e56531985bb12328ab4230c6c1 | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۱- https://git.kernel.org/stable/c/654aeddbc6e0f6e56531985bb12328ab4230c6c1
- https://git.kernel.org/stable/c/2d8b30b496bc53e961ba7415fd629fc27813017c
- https://git.kernel.org/stable/c/f0dbd9355ce1e93808541260c7ffab7956df9233
- https://git.kernel.org/stable/c/1e2a44875b6afb4add1115f7f3351dcbeb6f273d
- https://git.kernel.org/stable/c/8b7833f3bce35cb0d01c1503781523c099c675f0
- https://git.kernel.org/stable/c/c9341307ea16b9395c2e4c9c94d8499d91fe31d0
- https://access.redhat.com/security/cve/CVE-2026-46181 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2482532 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46181.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:36216 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41236 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34095 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34443 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34094 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25217 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25121 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35896 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35894 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35863 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25120 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33900 vendor-advisoryx_refsource_REDHAT
کانال تلگرام کُلون @kolunsec_fa
تازه‌های KEV، خبرهای مهم و خلاصه‌ی روزانه
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۰۷
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۰۸
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Linux
پیش‌بینی بهره‌برداری (EPSS)
۰٫۱۴٪
احتمال بهره‌برداری در ۳۰ روز
۳٫۷٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-366Race Condition within a Thread