CVE-2026-46189 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution maintainers, and users of Linux kernel versions affected by this vulnerability should verify Linux kernel versions and apply patches to prevent exploitation. The vulnerability affects Linux kernel versions and could lead to potential exploitation if not addressed. Affected operator, platform, vulnerability-management, and security-team impact should be carefully reviewed to ensure the fix is and

Why it matters

A double-free vulnerability was found in the Linux kernel's RDMA/vmw_pvrdma module. This issue occurs on the error path of pvrdma_alloc_ucontext() when pvrdma_uar_free() is called prematurely, leading to a double-free condition. Linux kernel developers and maintainers, Linux distribution maintainers, and users of Linux kernel versions affected by this vulnerability should verify Linux kernel versions and apply patches to prevent exploitation.

• Verify Linux kernel versions and apply patches to prevent exploitation of the double-free vulnerability.
• Monitor Linux kernel updates and patches for potential future vulnerabilities.
• Review and update Linux kernel versions to ensure the fix is applied.

Technical summary

The Linux kernel's RDMA/vmw_pvrdma module is vulnerable to a double-free condition. This occurs when pvrdma_uar_free() is called prematurely on the error path of pvrdma_alloc_ucontext(), leading to a double-free. The vulnerability affects Linux kernel versions and could lead to potential exploitation if not addressed. The technical details of the vulnerability are based on the CVE record and NVD entry, which provide a comprehensive overview of the issue. Defenders should apply patches or updates from the Linux kernel maintainers to address the vulnerability.

Defensive priority

Apply patches or updates from the Linux kernel maintainers to address the double-free vulnerability in RDMA/vmw_pvrdma.

Recommended defensive actions

• Apply patches or updates from the Linux kernel maintainers to address the double-free vulnerability in RDMA/vmw_pvrdma.
• Review and update Linux kernel versions to ensure the fix is applied.
• Monitor Linux kernel updates and patches for potential future vulnerabilities.
• Verify Linux kernel versions and apply patches to prevent exploitation of the double-free vulnerability.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description and affected versions. Linux kernel maintainers have released patches to address this issue. The vulnerability has been publicly disclosed, and defenders should verify Linux kernel versions and apply patches to prevent exploitation. The evidence is based on the CVE record and NVD entry, which provide a comprehensive overview of the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.