Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46053

In the Linux kernel, the following vulnerability has been resolved: net: rds: fix MR cleanup on copy error __rds_rdma_map() hands sg/pages ownership to the transport after get_mr() succeeds. If copying the generated cookie back to user space fails after that point, the error path must not free those resources again before dropping the MR reference. Remove the duplicate unpin/free from the put_user() failure branch so that MR teardown is handled only through the existing final cleanup path.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3fb7c5a2e59875218a09195b3210e41500cd9df7917e5aa1c464a22fc0fa27d1
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/rds/rdma.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/rds/rdma.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"91a44b406bc1f9e1c5da0cb7d0d5991b43b79147","status":"affected","version":"0d4597c8c5abdeeaf50774066c16683f30184dc8","versionType":"git"},{"lessThan":"106dc689206610cfa2098f593fdd1e020c997835","status":"affected","version":"0d4597c8c5abdeeaf50774066c16683f30184dc8","versionType":"git"},{"lessThan":"ec55a86f7fba7d9111df94b9c11a4755ed492995","status":"affected","version":"0d4597c8c5abdeeaf50774066c16683…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/rds/rdma.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/rds/rdma.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"91a44b406bc1f9e1c5da0cb7d0d5991b43b79147","status":"affected","version":"0d4597c8c5abdeeaf50774066c16683f30184dc8","versionType":"git"},{"lessThan":"106dc689206610cfa2098f593fdd1e020c997835","status":"affected","version":"0d4597c8c5abdeeaf50774066c16683f30184dc8","versionType":"git"},{"lessThan":"ec55a86f7fba7d9111df94b9c11a4755ed492995","status":"affected","version":"0d4597c8c5abdeeaf50774066c16683…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/033370ffb3c9c0264d19f8ba9ef769523266589a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/106dc689206610cfa2098f593fdd1e020c997835"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/8141a2dc70080eda1aedc0389ed2db2b292af5bd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/8fdbb6262a4a3ed44a0830a7793903b54bb27bdc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/91a44b406bc1f9e1c5da0cb7d0d5991b43b79147"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b3cb8cae530b2727d8245684148bb49425f6765c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/d95cea9298be1ba8876e3f156be96d3a492085ca"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/ec55a86f7fba7d9111df94b9c11a4755ed492995"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5c2cb3b0e41938c7b9184fa2f2778ac65d9f1c196067aacdf914a1bba7cab4b5 · sha256:21f80ec891eac147… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer