CVE-2026-98217

A flaw was found in the Linux kernel's mlx4 InfiniBand driver that can result in a Denial of Service DoS. When device registration encounters an error during setup, the driver frees memory objects associated with partition key interfaces but retains their references. A subsequent device cleanup...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Do not use the WQMEMRECLAIM flag for the workqueue. The issue was reported by a customer during SRIOV testing. When both the i40e and i40iw drivers are loaded, a warning is triggered in the checkFlushDependency function...

ROS-20260929-73-0201

The vulnerability of the irdmanetevent function in the drivers/infiniband/hw/irdma/utils.c file of the InfiniBand driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260929-73-0167

The vulnerability of the destroymc function in the drivers/infiniband/core/cma.c file of the Linux kernel’s InfiniBand driver is related to errors during link counter updates. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: IB/hfi1: Fixed an early init panic issue. An early failure in hfi1ipoibsetuprn can lead to the following panic: BUG: Unable to handle a NULL pointer derefrence in the kernel at 00000000000001b0 PGD 0 P4D 0 Oops: 0002 1 SMP NOP...

Linux InfiniBand Driver Use-After-Free

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions about the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to...

Linux kernel DoS

The vulnerability of the setupport and destroyport functions in the drivers/infiniband/core/sysfs.c driver of the Linux operating system’s InfiniBand kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux InfiniBand MAD Function DoS

The vulnerability of the createmadaddrinfo function in the drivers/infiniband/core/mad.c file of the Linux operating system’s InfiniBand driver module is related to the use of functions with non-standard implementations. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

EUVD-2026-48980

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

Linux InfiniBand Driver RCE

The vulnerability of the functions rxemralloc and rxemrinituser in the driver/infiniband/sw/rxe/rxemr.c module of the Linux operating system’s InfiniBand driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise th...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

USN-8529-1: Linux kernel vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

Linux InfiniBand Driver Heap Buffer Overflow DoS

The vulnerability of the ibdelsubdeviceandput function in the drivers/infiniband/core/device.c file of the Linux operating system’s InfiniBand driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260408-73-0010

A vulnerability in the findhwthreadmask function of the drivers/infiniband/hw/hfi1/affinity.c component of the Linux kernel is related to the lack of division by zero check. Exploitation of the vulnerability allows an intruder to affect confidentiality, integrity and availability of protected...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006698 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible that the...

Linux InfiniBand Heap Buffer Overflow DoS

The vulnerability of the qedrallocmr function in the drivers/infiniband/hw/qedr/verbs.c module of the Linux operating system’s InfiniBand driver involves improper memory release memory leak. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves a pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel InfiniBand Heap Buffer Overflow DoS

The vulnerability of the mlx5rumrcleanup function in the drivers/infiniband/hw/mlx5/umr.c file of the Linux kernel’s InfiniBand support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel driver Heap Buffer Overflow DoS

The vulnerability of the hnsrocemmap function in the drivers/infiniband/hw/hns/hnsrocemain.c file of the Linux operating system’s kernel driver is related to errors during the update of the reference counters. Exploiting this vulnerability could allow a remote attacker to cause service failures...