CVE-2026-46127

A flaw was found in the Linux kernel, specifically within the RDMA (Remote Direct Memory Access) ocrdma driver. This vulnerability arises from an uninitialized pointer in the ocrdma_copy_pd_uresp() function's error handling, which can lead to a NULL dereference. An attacker could exploit this to cause a system crash, resulting in a Denial of Service (DoS).

This Moderate-severity flaw in the Linux kernel's RDMA ocrdma driver can lead to a system crash and denial of service. The vulnerability, caused by an uninitialized pointer in error handling, requires local access to a system with the ocrdma driver loaded for exploitation. Red Hat Enterprise Linux 6 and 7 are affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To prevent the ocrdma kernel module from loading, blacklist it by creating a file /etc/modprobe.d/blacklist-ocrdma.conf with the content blacklist ocrdma. After saving the file, regenerate the initramfs using dracut -f -v and reboot the system for the changes to take effect. This action may affect functionality dependent on the ocrdma driver and RDMA hardware.