In the Linux kernel, the following vulnerability has been resolved:

RDMA/mana: Validate rx_hash_key_len

Sashiko points out that rx_hash_key_len comes from a uAPI structure and is
blindly passed to memcpy, allowing the userspace to trash kernel
memory. Bounds check it so the memcpy cannot overflow.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
0266a177631d4c6b963b5b12dd986a8c5abdbf06 affected < 7d7c9f0fcd19c4d2f0164347c58d49cafa961b72
0266a177631d4c6b963b5b12dd986a8c5abdbf06 affected < 11c1431d641e0e4e0529e96957995820600c7287
0266a177631d4c6b963b5b12dd986a8c5abdbf06 affected < 012796f9541fcd0c1fa8ae4da7eb4d83931ef838
0266a177631d4c6b963b5b12dd986a8c5abdbf06 affected < 7d94f155f354b961c598f71bafa804dceded513f
0266a177631d4c6b963b5b12dd986a8c5abdbf06 affected < 6dd2d4ad9c8429523b1c220c5132bd551c006425
Linux Linux affected
Version Status Constraints
6.2 affected —
0 unaffected < 6.2
6.6.141 unaffected ≤ 6.6.*
6.12.88 unaffected ≤ 6.12.*
6.18.30 unaffected ≤ 6.18.*
7.0.7 unaffected ≤ 7.0.*
7.1-rc3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/012796f9541fcd0c1fa8ae4da7eb4d83931ef838 cve-icon cve-icon
https://git.kernel.org/stable/c/11c1431d641e0e4e0529e96957995820600c7287 cve-icon cve-icon
https://git.kernel.org/stable/c/6dd2d4ad9c8429523b1c220c5132bd551c006425 cve-icon cve-icon
https://git.kernel.org/stable/c/7d7c9f0fcd19c4d2f0164347c58d49cafa961b72 cve-icon cve-icon
https://git.kernel.org/stable/c/7d94f155f354b961c598f71bafa804dceded513f cve-icon cve-icon
History

Thu, 28 May 2026 10:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_key_len comes from a uAPI structure and is blindly passed to memcpy, allowing the userspace to trash kernel memory. Bounds check it so the memcpy cannot overflow.
Title RDMA/mana: Validate rx_hash_key_len
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-28T09:36:01.805Z

Reserved: 2026-05-13T15:03:33.100Z

Link: CVE-2026-46145

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-05-28T10:16:30.110

Modified: 2026-05-28T10:16:30.110

Link: CVE-2026-46145

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.