CVE-2021-37102: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful...

UVI-2021-1001729 RDMA/cma: Do not change route.addr.src_addr.ss_family

RDMA/cma: Do not change route.addr.srcaddr.ssfamily This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001728 RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests

RDMA/cma: Ensure rdmaaddrcancel happens before issuing more requests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

UVI-2021-1001727 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001727 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001652 RDMA/cma: Do not change route.addr.src_addr.ss_family

RDMA/cma: Do not change route.addr.srcaddr.ssfamily This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

UVI-2021-1001651 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

PT-2021-26198

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue concerns the RDMA/cma component, specifically ensuring that rdma addr cancel occurs before more requests are issued. The actual impact and potential for attack have not been prove...

PT-2021-26122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26197

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak may occur upon failure. The actual impact and attack...

PT-2021-30194

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30117

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26199

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2021-26121

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.4 through v5.10.70 Description A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak can occur upon failure. The actual impact and attack...

PT-2021-30116

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.4 through v5.10.70 Description A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak can occur upon failure. The actual impact and likelihood ...

PT-2021-30193

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue concerns the RDMA/cma component, specifically the rdma addr cancel function. It is noted that this function should be executed before issuing more requests. The actual impact and...

PT-2021-30192

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.14.9 Description A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak can occur upon failure. The actual impact and attack...

Huawei FusionCompute Product Command Injection Vulnerability

Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, etc. A command injection vulnerability exists in the Huawei FusionCompute product, which stems from incorrect input validation in the CMA servi...

CVE-2021-37106

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user...

Command injection

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user...