CVE-2026-46084

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: Disable RX steering on RSS QP destroy When an RSS QP is destroyed (e.g. DPDK exit), mana_ib_destroy_qp_rss() destroys the RX WQ objects but does not disable vPort RX steering in firmware. This leaves stale steering configuration that still points to the destroyed RX objects. If traffic continues to arrive (e.g. peer VM is still transmitting) and the VF interface is subsequently brought up (mana_open), the firmware may deliver completions using stale CQ IDs from the old RX objects. These CQ IDs can be reused by the ethernet driver for new TX CQs, causing RX completions to land on TX CQs: WARNING: mana_poll_tx_cq+0x1b8/0x220 [mana] (is_sq == false) WARNING: mana_gd_process_eq_events+0x209/0x290 (cq_table lookup fails) Fix this by disabling vPort RX steering before destroying RX WQ objects. Note that mana_fence_rqs() cannot be used here because the fence completion is delivered on the CQ, which is polled by user-mode (e.g. DPDK) and not visible to the kernel driver. Refactor the disable logic into a shared mana_disable_vport_rx() in mana_en, exported for use by mana_ib, replacing the duplicate code. The ethernet driver's mana_dealloc_queues() is also updated to call this common function.

• CWE-416

• https://git.kernel.org/stable/c/3be5ed233de03b00ae868cfc06e95331d8d9007cPatch
• https://git.kernel.org/stable/c/6a2d6273b6c3581ce7b90ce17b5cbb4efd19438fPatch
• https://git.kernel.org/stable/c/8ba804869382ce307f2a15f5f6f2adfd791f41dcPatch
• https://git.kernel.org/stable/c/dbeb256e8dd87233d891b170c0b32a6466467036Patch
• https://git.kernel.org/stable/c/f1ccc4d500a0b87a5599343fc2f798048836e184Patch

Published

May 27, 2026

Last Modified

Jun 24, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46079In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-4608The ProfileGrid – User Profiles, Groups and Communities plug…6.5
• CVE-2026-46080In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46081In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46082In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46083In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46085In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-46086In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46087In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46088In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46089In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-4609The ProfileGrid – User Profiles, Groups and Communities plug…7.1