CVEvulnerability
CVE-2026-46127
5.5 MEDIUM
Official page ↗
- Status
- Undergoing Analysis
- Published
- 2026-05-28
- Last modified
- 2026-06-24
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
Sashiko points out that pd->uctx isn't initialized until late in the
function so all these error flow references are NULL and will crash. Use
the uctx that isn't NULL.
Affected configurations
• linux linux kernel (>= 3.5 < 5.10.258)
• linux linux kernel (>= 5.11 < 5.15.209)
• linux linux kernel (>= 5.16 < 6.1.175)
• linux linux kernel (>= 6.2 < 6.6.140)
• linux linux kernel (>= 6.7 < 6.12.88)
• linux linux kernel (>= 6.13 < 6.18.30)
• linux linux kernel (>= 6.19 < 7.0.7)
• linux linux kernel 7.1
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://git.kernel.org/stable/c/27b6eb1f27fda9bdd5cae028e396758cdf525845 Patch
- https://git.kernel.org/stable/c/34fbf48cf3b410d2a6e8c586fa952a36331ca5ba Patch
- https://git.kernel.org/stable/c/443c991fbc954cc9363e963c09f404b9f281f3a2 Patch
- https://git.kernel.org/stable/c/75fc130664ae324e7b2f9ad3630e0f175e9ca6c8 Patch
- https://git.kernel.org/stable/c/8832626a483439e207734e027afff322ccdf726e Patch
- https://git.kernel.org/stable/c/b610f33c5523fe26f6dd897667fff9c7a1de5905 Patch
- https://git.kernel.org/stable/c/e01a957561f663d3b68d2fd233a4502e3367efcd Patch
- https://git.kernel.org/stable/c/ec44c00a4fe1327efa35083f98b39c01cb535a51 Patch