CVE-2026-46189

A flaw was found in the Linux kernel, specifically within the RDMA (Remote Direct Memory Access) vmw_pvrdma module. This vulnerability is a double free, which means the system attempts to release the same memory resource twice. This can occur in an error handling path within the pvrdma_alloc_ucontext() function. Exploiting this flaw could lead to memory corruption or cause the system to become unavailable, resulting in a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the vmw_pvrdma kernel module from loading. Create a file named /etc/modprobe.d/disable-vmw_pvrdma.conf with the following content: install vmw_pvrdma /bin/true. A system reboot is required for this change to take effect. Disabling this module may impact functionality if VMware paravirtual RDMA devices are actively used.