CVE-2026-90218

CVE-2026-90218 affects the Linux kernel RDMA subsystem, specifically the rdma_restrack_add() path in drivers/infiniband/core/cma.c. During asynchronous address resolution in addr_handler(), if cma_acquire_dev_by_src_ip() fails, the resource is still unconditionally passed to rdma_restrack_add() w...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: IB/hfi1: Fixed the “off-by-one” error in sdma.h’s tx-numdescs. Unfortunately, the commit fd8958efe877 introduced another error, causing the descp array to overflow. This leads to further crashes that can be easily reproduced...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fixed the issue with the cleanup of the ibcachesetupone function. When ibcacheupdate returns an error, the ibcachesetupone function is exited immediately without proper cleanup. This occurs even though we have already...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: IB/hfi1: Fixed an early init panic issue. An early failure in hfi1ipoibsetuprn can lead to the following panic: BUG: Unable to handle a NULL pointer derefrence in the kernel at 00000000000001b0 PGD 0 P4D 0 Oops: 0002 1 SMP NOP...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw was discovered in the Linux kernel’s implementation of RDMA over InfiniBand. An attacker with a privileged local account can leak kernel stack information by issuing commands to the /dev/infiniband/rdmacm device node. Although this access is unlikely to reveal sensitive user information, i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Do not use the WQMEMRECLAIM flag for the workqueue. The issue was reported by a customer during SRIOV testing. When both the i40e and i40iw drivers are loaded, a warning is triggered in the checkFlushDependency function...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed the duplicated IWCMEVENTCONNECTREPLY event reported. If siwrecvmparr returns -EAGAIN, it means that the MPA reply has not been fully received, and IWCMEVENTCONNECTREPLY should not be reported in this case. This ma...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “IB/isert: Fix incorrect release of isert connection” The commit with ID 699826f4e30a “IB/isert: Fix incorrect release of isert connection” is causing problems when DEVICEREMOVAL occurs in OPA. ------------ Cut here ------------...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel before version 5.10. The file drivers/infiniband/core/ucma.c contains a use-after-free, as the context of the ctx variable is accessed through ctxlist in certain situations where ucmamigrateid is called, specifically when ucmaclose is invoked. This issue...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fixed a memory leak in initcreditreturn. When dmaalloccoherent fails to allocate dd-crbasei.va, initcreditreturn should deallocate dd-crbase and dd-crbasei that were allocated earlier. Otherwise, those resources will nev...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fixed the issue “KASAN: slab-use-after-free Read in ibdevicerename”. Call Trace: dumpstack: lib/dumpstack.c:94 inline dumpstacklvl+0x116/0x1f0: lib/dumpstack.c:120 printaddressdescription: mm/kasan/report.c:408 inline...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/irdma: Fixed a data race on the CQP request done field. KCSAN detected a data race in the cqprequest-requestdone memory location. This location is accessed without a lock in the irdmahandlecqpop function, while it is bein...

Astra Linux – Vulnerability in Linux, Linux 5.10

A issue was discovered in the Linux kernel through version 5.16-rc6. The function uapifinalize in drivers/infiniband/core/uverbsuapi.c lacks a check for the function kmallocarray...

CVE-2026-80880

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP reregmr Due to all the child mkeys in the implicit ODP configuration we cannot change anything in place for the parent mkey. Instead the whole thing needs to be rebuilt if any change is...

The vulnerability of the isert_login_recvdone() function in the drivers/infiniband/ulp/isert/ib_isert.c module of the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker...

The vulnerability of the ionic_create_cq() function in the drivers/infiniband/hw/ionic/ionic_controlpath.c file of the InfiniBand driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ioniccreatecq function in the drivers/infiniband/hw/ionic/ioniccontrolpath.c file of the InfiniBand driver for the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a malicious...

The vulnerability of the `create_mad_addr_info()` function in the `drivers/infiniband/core/mad.c` file of the Linux operating system’s kernel driver for InfiniBand, which allows a hacker to cause a service failure.

The vulnerability of the createmadaddrinfo function in the drivers/infiniband/core/mad.c file of the Linux operating system’s InfiniBand driver module is related to the use of functions with non-standard implementations. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the setup_port() and destroy_port() functions in the drivers/infiniband/core/sysfs.c driver of the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the setupport and destroyport functions in the drivers/infiniband/core/sysfs.c driver of the Linux operating system’s InfiniBand kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the efa_com_cmd_exec() function in the drivers/infiniband/hw/efa/efa_com.c driver of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the efacomcmdexec function in the drivers/infiniband/hw/efa/efacom.c driver of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerabilities in the functions save_state(), rollback_state(), and rxe_requester() of the drivers/infiniband/sw/rxe/rxe_req.c module of the InfiniBand driver for Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the savestate, rollbackstate, and rxerequester functions in the drivers/infiniband/sw/rxe/rxereq.c module of the InfiniBand driver for Linux operating systems is related to the violation of data format agreements. Exploiting this vulnerability can allow a remote attacker to...