Linux kernel RDMA/vmw_pvrdma double free
CVE-2026-46189 Published on May 28, 2026

RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free() is already called within pvrdma_dealloc_ucontext(), so calling it before triggers a double free.

NVD

Vulnerability Analysis

CVE-2026-46189 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:

LOCAL

Attack Complexity:

HIGH

Privileges Required:

LOW

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Type

CWE-1341

Products Associated with CVE-2026-46189

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-46189 are published in these products:

Linux Kernel

Red Hat Enterprise Linux (RHEL)

Red Hat Rhel E4s

Affected Versions

Linux:

Version 29c8d9eba550c6d73d17cc1618a9f5f2a7345aa1 and below 269967d7693304e1f06ed2dff4ebbbeeb397cda4 is affected.
Version 29c8d9eba550c6d73d17cc1618a9f5f2a7345aa1 and below 1df5711121cdc11e76b889408fdbe459feba1d39 is affected.
Version 29c8d9eba550c6d73d17cc1618a9f5f2a7345aa1 and below 3a231c34c5bc3d3cfc850b877758ec9fdaa8a483 is affected.
Version 29c8d9eba550c6d73d17cc1618a9f5f2a7345aa1 and below ecc36a82ecfcfdf3c6606d209f22ec5543c410e0 is affected.
Version 29c8d9eba550c6d73d17cc1618a9f5f2a7345aa1 and below 45d25e3ec17900bf5a9d6876ff16ceee31c4c0e0 is affected.
Version 29c8d9eba550c6d73d17cc1618a9f5f2a7345aa1 and below 0c63333ff97bd1275294fd12840a0efe9d7a4c59 is affected.
Version 29c8d9eba550c6d73d17cc1618a9f5f2a7345aa1 and below 935ee27d0904aa944cbcc979094c20e5ef62eead is affected.
Version 29c8d9eba550c6d73d17cc1618a9f5f2a7345aa1 and below e38e86995df27f1f854063dab1f0c6a513db3faf is affected.

Linux:

Version 4.10 is affected.
Before 4.10 is unaffected.
Version 5.10.258, <= 5.10.* is unaffected.
Version 5.15.209, <= 5.15.* is unaffected.
Version 6.1.175, <= 6.1.* is unaffected.
Version 6.6.140, <= 6.6.* is unaffected.
Version 6.12.88, <= 6.12.* is unaffected.
Version 6.18.30, <= 6.18.* is unaffected.
Version 7.0.7, <= 7.0.* is unaffected.
Version 7.1, <= * is unaffected.

Red Hat Enterprise Linux AppStream (v. 10): Red Hat Enterprise Linux AppStream E4S (v.9.2): Red Hat Enterprise Linux AppStream E4S (v.9.4): Red Hat Enterprise Linux AppStream (v. 9): Red Hat Enterprise Linux BaseOS (v. 10): Red Hat Enterprise Linux BaseOS (v. 8): Red Hat Enterprise Linux BaseOS E4S (v.9.2): Red Hat Enterprise Linux BaseOS E4S (v.9.4): Red Hat Enterprise Linux BaseOS (v. 9): Red Hat Enterprise Linux CodeReady Linux Builder (v. 10): Red Hat Enterprise Linux CRB (v. 8): Red Hat Enterprise Linux CodeReady Linux Builder (v. 9): Red Hat Enterprise Linux Real Time for NFV (v. 10): Red Hat Enterprise Linux NFV (v. 8): Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2): Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4): Red Hat Enterprise Linux Real Time for NFV (v. 9): Red Hat Enterprise Linux Real Time (v. 10): Red Hat Enterprise Linux RT (v. 8): Red Hat Enterprise Linux Real Time E4S (v.9.2): Red Hat Enterprise Linux Real Time E4S (v.9.4): Red Hat Enterprise Linux Real Time (v. 9): Red Hat Enterprise Linux 7: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 6:

Exploit Probability

EPSS

0.14%

Percentile

3.53%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

Linux kernel RDMA/vmw_pvrdma double freeCVE-2026-46189 Published on May 28, 2026

Vulnerability Analysis

Weakness Type

Products Associated with CVE-2026-46189

Affected Versions

Exploit Probability

Linux kernel RDMA/vmw_pvrdma double free
CVE-2026-46189 Published on May 28, 2026