CVE-2025-71157

CVE-2025-71157 affects the Linux kernel: RDMA/core path ib_del_sub_device_and_put() bug where a device reference grabbed by nldev_deldev() (via ib_device_get_by_index()) wasn’t dropped before returning -EOPNOTSUPP. The fix is to always drop the device refcount before returning, effectively solvin...

CVE-2025-71157 RDMA/core: always drop device refcount in ib_del_sub_device_and_put()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ibdelsubdeviceandput Since nldevdeldev introduced by commit 060c642b2ab8 "RDMA/nldev: Add support to add/delete a sub IB device through netlink" grabs a reference using ibdevicegetbyindex...

MiracleLinux 8 : kernel-4.18.0-305.25.1.el8_4 (AXSA:2021-2534:24)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2534:24 advisory. kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free CVE-2020-36385 kernel: out-of-bounds write due to a heap buffer overflow...

MiracleLinux 7 : kernel-3.10.0-1160.49.1.el7 (AXSA:2021-2571:25)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2571:25 advisory. kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free CVE-2020-36385 Tenable has extracted the preceding description block directly fro...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000850)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000850 advisory. The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs f...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003867)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003867 advisory. A memory leak in the bnxtrecreatesrq function in drivers/infiniband/hw/bnxtre/ibverbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003875 advisory. An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after- free because the ctx is reached via the ctxlist in some...

MiracleLinux 4 : kernel-2.6.32-642.3.1.el6 (AXSA:2016-612:06)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-612:06 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system:...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003958 advisory. drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrscltdevrelease. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000735 advisory. The InfiniBand aka IB stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service kerne...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004001 advisory. A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003796 advisory. A memory leak in the sdmainit function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004007 advisory. A memory leak in the sdmainit function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000651)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000651 advisory. Integer overflow in the memcheckrange function in drivers/infiniband/sw/rxe/rxemr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004235 advisory. A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000839 advisory. The rdsibxmit function in net/rds/ibsend.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003134 advisory. Integer overflow in the memcheckrange function in drivers/infiniband/sw/rxe/rxemr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003328 advisory. The InfiniBand aka IB stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service kerne...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002050 advisory. The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs f...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002839 advisory. drivers/infiniband/ulp/srpt/ibsrpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service NULL pointer dereference and system crash by...