CVE-2023-54302

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP completion stats CQP completion statistics is read lockesly in irdmawaitevent and irdmacheckcqpprogress while it can be updated in the completion thread irdmascccqgetcqeinfo on another CPU as KCSA...

CVE-2023-54292

CVE-2023-54292 : In the Linux kernel's RDMA/irdma subsystem, a data race was fixed in the CQP request_done field. KCSAN detected a race when irdma_handle_cqp_op read/write access occurs locklessly while irdma_cqp_ce_handler updates it. The fix annotates lockless accesses with READ_ONCE/WRITE_ONCE...

CVE-2023-54292 RDMA/irdma: Fix data race on CQP request done

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP request done KCSAN detects a data race on cqprequest-requestdone memory location which is accessed locklessly in irdmahandlecqpop while being updated in irdmacqpcehandler. Annotate lockless intent...

CVE-2023-54292 RDMA/irdma: Fix data race on CQP request done

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP request done KCSAN detects a data race on cqprequest-requestdone memory location which is accessed locklessly in irdmahandlecqpop while being updated in irdmacqpcehandler. Annotate lockless intent...

CVE-2023-54292

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP request done KCSAN detects a data race on cqprequest-requestdone memory location which is accessed locklessly in irdmahandlecqpop while being updated in irdmacqpcehandler. Annotate lockless intent...

CVE-2023-54283 bpf: Address KCSAN report on bpf_lru_list

In the Linux kernel, the following vulnerability has been resolved: bpf: Address KCSAN report on bpflrulist KCSAN reported a data-race when accessing node-ref. Although node-ref does not have to be accurate, take this chance to use a more common READONCE and WRITEONCE pattern instead of datarace...

CVE-2023-54283 bpf: Address KCSAN report on bpf_lru_list

In the Linux kernel, the following vulnerability has been resolved: bpf: Address KCSAN report on bpflrulist KCSAN reported a data-race when accessing node-ref. Although node-ref does not have to be accurate, take this chance to use a more common READONCE and WRITEONCE pattern instead of datarace...

CVE-2023-54226 af_unix: Fix data races around sk->sk_shutdown.

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data races around sk-skshutdown. KCSAN found a data race around sk-skshutdown where unixreleasesock and unixshutdown update it under unixstatelock, OTOH unixpoll and unixdgrampoll read it locklessly. We need to annota...

CVE-2023-54218

CVE-2023-54218 corresponds to a Linux kernel data-race fix in sock_recv_cmsgs() where concurrent reads/writes to sk->sk_stamp required READ_ONCE() protection. The vulnerability arises from a KCSAN-reported data race in packet_recvmsg and related code paths (sock_recv_cmsgs, sock_write_timestam...

CVE-2023-54218 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

CVE-2023-54218 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992182 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data-races around user-unixinflight. user-unixinflight is changed under...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992360 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxwait kcm-rxpsock can be read locklessly in kcmrfree. Annota...

PT-2025-54129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a data-race condition when accessing node-ref within the bpf lru list functionality. Kernel Concurrency Sanitizer KCSAN identified this issue during operations...

PT-2025-54055

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc7-02330-gca6270c12e20 Description The Linux kernel contained data races around the sk-sk shutdown variable within the AF UNIX socket family. Kernel Concurrency Sanitizer KCSAN identified that unix release...

PT-2025-54148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a data race condition within the RDMA/irdma subsystem, specifically concerning CQP Completion Queue Pair completion statistics. The issue arises because...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992194)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992194 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix a possible null-pointer dereference due to data race in sndhdacregmapsync The...

PT-2025-54138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a data race condition within the RDMA/irdma subsystem, specifically related to the completion queue pair CQP request done memory location. Kernel Concurrency...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992682 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev-neededheadroom IP tunnels can apparently update...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992370 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxpsock kcm-rxpsock can be read locklessly in kcmrfree...