High severity7.8NVD Advisory· Published May 27, 2026· Updated Jun 16, 2026
CVE-2026-46053
CVE-2026-46053
Description
In the Linux kernel, the following vulnerability has been resolved:
net: rds: fix MR cleanup on copy error
__rds_rdma_map() hands sg/pages ownership to the transport after get_mr() succeeds. If copying the generated cookie back to user space fails after that point, the error path must not free those resources again before dropping the MR reference.
Remove the duplicate unpin/free from the put_user() failure branch so that MR teardown is handled only through the existing final cleanup path.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.6.1,<5.10.258
- cpe:2.3:o:linux:linux_kernel:5.6:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.6:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.6:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.6:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.6:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.6:rc7:*:*:*:*:*:*
- (no CPE)
- osv-coords2 versions
>= 5.6.0, < 5.10.258+ 1 more
- (no CPE)range: >= 5.6.0, < 5.10.258
- (no CPE)range: < 7.0.11-1.1
Patches
Vulnerability mechanics
References
8- git.kernel.org/stable/c/033370ffb3c9c0264d19f8ba9ef769523266589anvdPatch
- git.kernel.org/stable/c/106dc689206610cfa2098f593fdd1e020c997835nvdPatch
- git.kernel.org/stable/c/8141a2dc70080eda1aedc0389ed2db2b292af5bdnvdPatch
- git.kernel.org/stable/c/8fdbb6262a4a3ed44a0830a7793903b54bb27bdcnvdPatch
- git.kernel.org/stable/c/91a44b406bc1f9e1c5da0cb7d0d5991b43b79147nvdPatch
- git.kernel.org/stable/c/b3cb8cae530b2727d8245684148bb49425f6765cnvdPatch
- git.kernel.org/stable/c/d95cea9298be1ba8876e3f156be96d3a492085canvdPatch
- git.kernel.org/stable/c/ec55a86f7fba7d9111df94b9c11a4755ed492995nvdPatch
News mentions
0No linked articles in our index yet.