CVE-2026-46189

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-46189
In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free() is already called within pvrdma_dealloc_ucontext(), so calling it before triggers a double free.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0c63333ff97bd1275294fd12840a0efe9d7a4c59 Patch
https://git.kernel.org/stable/c/1df5711121cdc11e76b889408fdbe459feba1d39 Patch
https://git.kernel.org/stable/c/269967d7693304e1f06ed2dff4ebbbeeb397cda4 Patch
https://git.kernel.org/stable/c/3a231c34c5bc3d3cfc850b877758ec9fdaa8a483 Patch
https://git.kernel.org/stable/c/45d25e3ec17900bf5a9d6876ff16ceee31c4c0e0 Patch
https://git.kernel.org/stable/c/935ee27d0904aa944cbcc979094c20e5ef62eead Patch
https://git.kernel.org/stable/c/e38e86995df27f1f854063dab1f0c6a513db3faf Patch
https://git.kernel.org/stable/c/ecc36a82ecfcfdf3c6606d209f22ec5543c410e0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
History

11 Jun 2026, 03:07

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0c63333ff97bd1275294fd12840a0efe9d7a4c59 - () https://git.kernel.org/stable/c/0c63333ff97bd1275294fd12840a0efe9d7a4c59 - Patch
References () https://git.kernel.org/stable/c/1df5711121cdc11e76b889408fdbe459feba1d39 - () https://git.kernel.org/stable/c/1df5711121cdc11e76b889408fdbe459feba1d39 - Patch
References () https://git.kernel.org/stable/c/269967d7693304e1f06ed2dff4ebbbeeb397cda4 - () https://git.kernel.org/stable/c/269967d7693304e1f06ed2dff4ebbbeeb397cda4 - Patch
References () https://git.kernel.org/stable/c/3a231c34c5bc3d3cfc850b877758ec9fdaa8a483 - () https://git.kernel.org/stable/c/3a231c34c5bc3d3cfc850b877758ec9fdaa8a483 - Patch
References () https://git.kernel.org/stable/c/45d25e3ec17900bf5a9d6876ff16ceee31c4c0e0 - () https://git.kernel.org/stable/c/45d25e3ec17900bf5a9d6876ff16ceee31c4c0e0 - Patch
References () https://git.kernel.org/stable/c/935ee27d0904aa944cbcc979094c20e5ef62eead - () https://git.kernel.org/stable/c/935ee27d0904aa944cbcc979094c20e5ef62eead - Patch
References () https://git.kernel.org/stable/c/e38e86995df27f1f854063dab1f0c6a513db3faf - () https://git.kernel.org/stable/c/e38e86995df27f1f854063dab1f0c6a513db3faf - Patch
References () https://git.kernel.org/stable/c/ecc36a82ecfcfdf3c6606d209f22ec5543c410e0 - () https://git.kernel.org/stable/c/ecc36a82ecfcfdf3c6606d209f22ec5543c410e0 - Patch
First Time Linux linux Kernel
Linux
CWE CWE-415
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/1df5711121cdc11e76b889408fdbe459feba1d39 -
  • () https://git.kernel.org/stable/c/269967d7693304e1f06ed2dff4ebbbeeb397cda4 -
  • () https://git.kernel.org/stable/c/3a231c34c5bc3d3cfc850b877758ec9fdaa8a483 -

28 May 2026, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-28 10:16

Updated : 2026-06-11 03:07

NVD link : CVE-2026-46189

Mitre link : CVE-2026-46189

CVE.ORG link : CVE-2026-46189

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free