417512 matches found
CVE-2026-90308 RDMA/erdma: Hold QP references for AE and CM processing
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from dev-qpxa and then use or reference them outside the xarray lock. erdmadestroyqp can drop the destroy-path reference and...
CVE-2026-90308 RDMA/erdma: Hold QP references for AE and CM processing
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from dev-qpxa and then use or reference them outside the xarray lock. erdmadestroyqp can drop the destroy-path reference and...
EUVD-2026-81968
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...
CVE-2026-90307
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...
CVE-2026-90308
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from dev-qpxa and then use or reference them outside the xarray lock. erdmadestroyqp can drop the destroy-path reference and...
CVE-2026-90308
CVE-2026-90308 is a use-after-free race condition in the Linux kernel's RDMA/erdma subsystem. AE QP fatal events and iWARP CM paths load queue pairs from dev->qp_xa and then reference them outside the xarray lock, while erdma_destroy_qp() can concurrently free those QP resources. The fix intro...
CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...
CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...
EUVD-2026-81967
In the Linux kernel, the following vulnerability has been resolved: ARM: 9481/2: breakpoint: CFI breakpoints only on demand This removes the stub hwbreakpointcfihandler from ARM, making it not steal breakpoint type 0x03 ARMENTRYCFIBREAKPOINT unless CFI is actively used in the kernel. When not...
CVE-2026-90306 ARM: 9481/2: breakpoint: CFI breakpoints only on demand
In the Linux kernel, the following vulnerability has been resolved: ARM: 9481/2: breakpoint: CFI breakpoints only on demand This removes the stub hwbreakpointcfihandler from ARM, making it not steal breakpoint type 0x03 ARMENTRYCFIBREAKPOINT unless CFI is actively used in the kernel. When not...
CVE-2026-90306
In the Linux kernel, the following vulnerability has been resolved: ARM: 9481/2: breakpoint: CFI breakpoints only on demand This removes the stub hwbreakpointcfihandler from ARM, making it not steal breakpoint type 0x03 ARMENTRYCFIBREAKPOINT unless CFI is actively used in the kernel. When not...
CVE-2026-90306
CVE-2026-90306 affects the Linux kernel on ARM architectures. The vulnerability resides in the hw_breakpoint_cfi_handler() stub, which was unconditionally claiming breakpoint type 0x03 (ARM_ENTRY_CFI_BREAKPOINT) even when CFI (Control Flow Integrity) was not actively instrumented in the kernel. T...
CVE-2026-90305
CVE-2026-90305 affects the Linux kernel on ARM when PREEMPT_RT is enabled. The root cause is that commit c6e61c06d606 enabled PREEMPT_RT on ARM without selecting HAVE_POSIX_CPU_TIMERS_TASK_WORK , leaving CPU timers to expire in hard IRQ context . On PREEMPT_RT, this causes run_posix_cpu_timers() ...
CVE-2026-90305 ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK
In the Linux kernel, the following vulnerability has been resolved: ARM: 9483/1: select HAVEPOSIXCPUTIMERSTASKWORK Commit c6e61c06d606 "ARM: 9463/1: Allow to enable RT" enabled PREEMPTRT on ARM but did not select HAVEPOSIXCPUTIMERSTASKWORK. This leaves CONFIGPOSIXCPUTIMERSTASKWORK disabled, so CP...
CVE-2026-90304
In the Linux kernel, the following vulnerability has been resolved: ARM: 9484/1: enable interrupts when unhandled user faults are triggered PREEMPTRT requires interrupts to be enabled when sending signals. When doDataAbort/doPrefetchAbort triggers unhandled user faults, that is inf-fn return a...
EUVD-2026-81966
In the Linux kernel, the following vulnerability has been resolved: ARM: 9483/1: select HAVEPOSIXCPUTIMERSTASKWORK Commit c6e61c06d606 "ARM: 9463/1: Allow to enable RT" enabled PREEMPTRT on ARM but did not select HAVEPOSIXCPUTIMERSTASKWORK. This leaves CONFIGPOSIXCPUTIMERSTASKWORK disabled, so CP...
EUVD-2026-81965
In the Linux kernel, the following vulnerability has been resolved: ARM: 9484/1: enable interrupts when unhandled user faults are triggered PREEMPTRT requires interrupts to be enabled when sending signals. When doDataAbort/doPrefetchAbort triggers unhandled user faults, that is inf-fn return a...
CVE-2026-90304 ARM: 9484/1: enable interrupts when unhandled user faults are triggered
In the Linux kernel, the following vulnerability has been resolved: ARM: 9484/1: enable interrupts when unhandled user faults are triggered PREEMPTRT requires interrupts to be enabled when sending signals. When doDataAbort/doPrefetchAbort triggers unhandled user faults, that is inf-fn return a...
CVE-2026-90304 ARM: 9484/1: enable interrupts when unhandled user faults are triggered
In the Linux kernel, the following vulnerability has been resolved: ARM: 9484/1: enable interrupts when unhandled user faults are triggered PREEMPTRT requires interrupts to be enabled when sending signals. When doDataAbort/doPrefetchAbort triggers unhandled user faults, that is inf-fn return a...
CVE-2026-90305
In the Linux kernel, the following vulnerability has been resolved: ARM: 9483/1: select HAVEPOSIXCPUTIMERSTASKWORK Commit c6e61c06d606 "ARM: 9463/1: Allow to enable RT" enabled PREEMPTRT on ARM but did not select HAVEPOSIXCPUTIMERSTASKWORK. This leaves CONFIGPOSIXCPUTIMERSTASKWORK disabled, so CP...