The Linux kernel's RDMA vmw_pvrdma driver contained a double free vulnerability triggered on the error path of pvrdma_alloc_ucontext(). Specifically, pvrdma_uar_free() was called redundantly because it is already invoked within pvrdma_dealloc_ucontext(), causing a double free. This vulnerability is tracked as CVE-2026-46189 and affects version 3.0 of the software. The issue was publicly disclosed with a high severity rating (CVSS vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Red Hat has issued a security advisory including a patch to fix this issue in their kernel packages. The fix requires updating the kernel and rebooting the system.

Successful exploitation of this double free vulnerability could lead to memory corruption, resulting in a denial of service or potential privilege escalation. The vulnerability requires local access with low privileges and does not require user interaction. The impact is rated high due to the potential for complete system compromise or crash.

A security update fixing this vulnerability has been released by Red Hat and is included in updated kernel packages for Red Hat Enterprise Linux 9.4 and related distributions. Users should apply the kernel update provided by their vendor and reboot their systems to ensure the fix is applied. Patch status is confirmed by the vendor advisory. No additional mitigations are specified beyond applying the official patch.