HOMEVULNERABILITIESCVE-2026-46265
HIGH

CVE-2026-46265

Published: June 3, 2026· Updated: Jun 9, 2026

7.5
CVSS v3.1
EPSS:0.02%probability of exploitation in 30 daysPercentile:7.2th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix WQ_MEM_RECLAIM warning

When sunrpc is used, if a reset triggered, our wq may lead the

following trace:

workqueue: WQ_MEM_RECLAIM xprtiod:xprt_rdma_connect_worker [rpcrdma]

is flushing !WQ_MEM_RECLAIM hns_roce_irq_workq:flush_work_handle

[hns_roce_hw_v2]

WARNING: CPU: 0 PID: 8250 at kernel/workqueue.c:2644 check_flush_dependency+0xe0/0x144

Call trace:

check_flush_dependency+0xe0/0x144

start_flush_work.constprop.0+0x1d0/0x2f0

__flush_work.isra.0+0x40/0xb0

flush_work+0x14/0x30

hns_roce_v2_destroy_qp+0xac/0x1e0 [hns_roce_hw_v2]

ib_destroy_qp_user+0x9c/0x2b4

rdma_destroy_qp+0x34/0xb0

rpcrdma_ep_destroy+0x28/0xcc [rpcrdma]

rpcrdma_ep_put+0x74/0xb4 [rpcrdma]

rpcrdma_xprt_disconnect+0x1d8/0x260 [rpcrdma]

xprt_rdma_connect_worker+0xc0/0x120 [rpcrdma]

process_one_work+0x1cc/0x4d0

worker_thread+0x154/0x414

kthread+0x104/0x144

ret_from_fork+0x10/0x18

Since QP destruction frees memory, this wq should have the WQ_MEM_RECLAIM.

NVD Source

Technical Analysis

CVE-2026-46265 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges Req.None
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Vendors & Products

Linux1 product(s)
linux kernel
Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://git.kernel.org/stable/c/0cbec8b49270f3f0600b8e3ef5e8f0d233dcea27
PATCHhttps://git.kernel.org/stable/c/12761bd0ae16a80f237c2a65ab1b1064076cc74a
PATCHhttps://git.kernel.org/stable/c/562c96b1393da2df3ea62173c84117b39da353b9
PATCHhttps://git.kernel.org/stable/c/70a5eb757ace5bd627a36f04d871eaf85def424d
PATCHhttps://git.kernel.org/stable/c/c0a26bbd3f99b7b03f072e3409aff4e6ec8af6f6
PATCHhttps://git.kernel.org/stable/c/c5ef9a1bcf5b597695d9c2e6ac452e9f89521862

All References (6)

→
https://git.kernel.org/stable/c/0cbec8b49270f3f0600b8e3ef5e8f0d233dcea27Patch
→
https://git.kernel.org/stable/c/12761bd0ae16a80f237c2a65ab1b1064076cc74aPatch
→
https://git.kernel.org/stable/c/562c96b1393da2df3ea62173c84117b39da353b9Patch
→
https://git.kernel.org/stable/c/70a5eb757ace5bd627a36f04d871eaf85def424dPatch
→
https://git.kernel.org/stable/c/c0a26bbd3f99b7b03f072e3409aff4e6ec8af6f6Patch
→
https://git.kernel.org/stable/c/c5ef9a1bcf5b597695d9c2e6ac452e9f89521862Patch

Quick Facts

CVE IDCVE-2026-46265
CVSS Score7.5 / 10
SeverityHIGH
CISA KEVNo
EPSS (30d)0.02%
Affected1 vendor(s)
PublishedJun 3, 2026

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2026-46265 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWatch. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2026-46265·NVD