AZL-88737
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88737.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-88737
- Upstream
- Published
- 2026-05-27T14:17:24Z
- Modified
- 2026-08-28T17:47:38.197954387Z
- Summary
- CVE-2026-46053 affecting package kernel for versions less than 6.6.141.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: rds: fix MR cleanup on copy error
_rdsrdmamap() hands sg/pages ownership to the transport after getmr() succeeds. If copying the generated cookie back to user space fails after that point, the error path must not free those resources again before dropping the MR reference.
Remove the duplicate unpin/free from the put_user() failure branch so that MR teardown is handled only through the existing final cleanup path.
- References