CVE-2026-98357: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isertsenddone hands ISTATESENDTASKMGTRSP, ISTATESENDREJECT and ISTATESENDTEXTRSP completions off to isertcompwq and returns. The work item then...

CVE-2026-98216: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...

PT-2026-106586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the Reliable Datagram Sockets RDS implementation for InfiniBand ib. The function rds ib cm connect complete operates within the RDMA-CM event handler while holding t...

CVE-2026-98347: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Avoid restoring OPERUP after multicast flush ipoibibdevflushlight temporarily clears IPOIBFLAGOPERUP to prevent multicast joins while ipoibmcastdevflush is running, and restores the flag afterwards if it was previously...

CVE-2026-98217: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/mlx4: Fix use-after-free on pkey sysfs registration failure registerpkeytree ignores errors from registeronepkeytree and continues registering the remaining slaves. The per-slave error path has already released the pkey parent...

PT-2026-106676

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A race condition exists in the IPoIB module of the Linux kernel. The function ipoib ib dev flush light temporarily clears the IPOIB FLAG OPER UP flag to prevent multicast joins during the...

PT-2026-106681

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A CQ pool leak occurs in the RDMA/rtrs-clt component when a connection is interrupted. The client borrows shared CQ credits in the ADDR RESOLVED handler using the ib cq pool get function...

CVE-2026-98358: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/iser: reject a remote invalidation of an unregistered direction A write command whose data is sent entirely as immediate data is not registered. iserregmemfastreg takes the DMA key path and leaves rdmaregISERDIROUT.desc at NUL...

PT-2026-106546

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A use-after-free issue exists in the IB/mlx4 component. The register pkey tree function ignores errors returned by register one pkey tree and proceeds to register remaining slaves. Because...

PT-2026-106686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the IB/isert component of the Linux kernel. The isert send done function offloads completions for ISTATE SEND TASKMGTRSP, ISTATE SEND REJECT, and...

Linux Distros Unpatched Vulnerability : CVE-2026-98217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mlx4: Fix use-after-free on pkey sysfs registration failure registerpkeytree ignores errors from registeronepkeytree and continues registering the remaining...

Linux Distros Unpatched Vulnerability : CVE-2026-98357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/isert: wait for deferred control PDU completions before releasing the connection isertsenddone hands ISTATESENDTASKMGTRSP, ISTATESENDREJECT and...

Linux Distros Unpatched Vulnerability : CVE-2026-98358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/iser: reject a remote invalidation of an unregistered direction A write command whose data is sent entirely as immediate data is not registered...

Linux Distros Unpatched Vulnerability : CVE-2026-98347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/IPoIB: Avoid restoring OPERUP after multicast flush ipoibibdevflushlight temporarily clears IPOIBFLAGOPERUP to prevent multicast joins while ipoibmcastdevflu...

Linux Distros Unpatched Vulnerability : CVE-2026-98216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rds: ib: rejecting FRMR registrations before an IB connection is established The rdsibgetmr function extracts the rdsibconnection from conn-ctransportdata and passes it to rdsibregfrmr for FRWR memory registration. In a newly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: rds: clearing isends on setup unwind The RDS IB connection teardown path is modified so that it can be executed during partial startup and upon repeated shutdown attempts. NULL pointers are used to distinguish resources that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: IB/isert: Rejects login PDUs that declare more data than was actually received. The isertloginrecvdone function records how many bytes the HCA actually places into the login buffer. However, nothing compares this value to the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/core: Ensure that “ibport” is valid when accessing the sysfs node. The “ibport” structure must be set before adding the sysfs kobject, and reset after removing it. Otherwise, the system may crash when accessing the sysfs...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: IB/isert: Rejects PDUs that declare more data than was received. isertrecvdone passes each received PDU to the opcode handlers without ever checking wc-bytelen, which is the number of bytes actually placed in the receive...