UBUNTU-CVE-2021-46983

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: Fix NULL deref when SEND is completed with error When running some traffic and taking down the link on peer, a retry counter exceeded error is received. This leads to nvmetrdmaerrorcomp which tried accessing the...

CVE-2021-46983 nvmet-rdma: Fix NULL deref when SEND is completed with error

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: Fix NULL deref when SEND is completed with error When running some traffic and taking down the link on peer, a retry counter exceeded error is received. This leads to nvmetrdmaerrorcomp which tried accessing the...

Design/Logic Flaw

An out-of-bounds memory access flaw was found in the iouring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the system...

CVE-2023-6560

CVE-2023-6560 corresponds to an out-of-bounds memory access in the Linux kernel io_uring subsystem (SQ/CQ rings) that can allow a local user to crash the system. Affected component is the io_uring handling code, specifically the __io_uaddr_map() path. The vulnerability is local in scope with the ...

kernel: RDMA/irdma: Fix a window for use-after-free

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a window for use-after-free During a destroy CQ an interrupt may cause processing of a CQE after CQ resources are freed by irdmacqfreersrc. Fix this by moving the call to irdmacqfreersrc after the...

kernel: RDMA/irdma: Fix a window for use-after-free

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a window for use-after-free During a destroy CQ an interrupt may cause processing of a CQE after CQ resources are freed by irdmacqfreersrc. Fix this by moving the call to irdmacqfreersrc after the...

CVE-2023-1544

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of...

PT-2025-54030

Name of the Vulnerable Software and Affected Versions linux affected versions not specified Description A flaw exists in the Linux kernel related to RDMA/efa resource deallocation. Specifically, the order of resource deallocation was incorrect, potentially leading to a refcount underflow when...

PT-2021-26792

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to the RDMA/core component, where send and receive CQ are not set before forwarding to the driver. The actual impact and attack plausibility have not yet been proven...

PT-2021-30787

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.4 Description The issue is related to the RDMA/core component, where send and receive CQ are not set before forwarding to the driver. The actual impact and attack plausibility have not yet been proven...

PT-2021-30785

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description The issue is related to the net/mlx5e module in the Linux Kernel. It involves the removal of a debug pointer in the mlx5 debug cq remove function. The actual impact and attack plausibility hav...

PT-2021-26755

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.75 through 5.10.81 Description: A potential issue exists in the net/mlx5e component, where the cq-dbg pointer is not properly nullified in the mlx5 debug cq remove function. The actual impact and attack plausibility...

PT-2021-30750

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.75 through 5.10.81 Description A potential issue exists in the net/mlx5e module, specifically in the mlx5 debug cq remove function, where the cq-dbg pointer is not properly nullified. The actual impact and attack...

PT-2021-26790

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to a potential security vulnerability in the net/mlx5e module. It involves the nullification of the cq-dbg pointer in the mlx5 debug cq remove function. The actual impac...

PT-2021-26555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.11 through v5.14.13 Description A memory leak issue exists in the mlx5 core destroy cq error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3.11...

PT-2021-30550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.11 through 5.14.13 Description A memory leak issue exists in the mlx5 core destroy cq error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.11 throug...

PT-2021-30616

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.11 through 5.14 Description A memory leak issue exists in the mlx5 core destroy cq error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.11 through...

PT-2021-30498

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.75 Description A memory leak issue exists in the mlx5 core destroy cq error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26503

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.75 Description A memory leak issue exists in the mlx5 core destroy cq error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26621

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.11 through 5.14 Description: A memory leak issue exists in the mlx5 core destroy cq error path. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.11 throug...