CVE-2026-45852

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the RDMA/rxe component. In the rxe srq from init() function, the queue pointer q is assigned to srq->rq.queue before the SRQ number is copied to user space. If the copy to user() function fails, rxe queue cleanup() is called to free the queue, but an invalid pointer remains in srq->rq.queue. Subsequently, the caller function rxe create srq() triggers rxe srq cleanup(), which results in a second call to rxe queue cleanup() on the same memory address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.