USN-7907-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - Mailbox framework; -...

USN-7907-1 linux, linux-aws, linux-aws-hwe, linux-kvm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - Mailbox framework; -...

USN-7774-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...

USN-7769-1 linux, linux-aws, linux-gcp, linux-gcp-6.14, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

The vulnerability of the `rpcrdma_remove_one()` function in the `net/sunrpc/xprtrdma/ib_client.c` module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the rpcrdmaremoveone function in the net/sunrpc/xprtrdma/ibclient.c module of the Linux operating system’s RPC protocol implementation is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cau...

Vulnerability of the siw_tcp_sendpages() function in the drivers/infiniband/sw/siw/siw_qp_tx.c module – The Linux kernel’s InfiniBand support driver allows a hacker to trigger a service failure.

Vulnerability of the siwtcpsendpages function in the drivers/infiniband/sw/siw/siwqptx.c module – The Linux kernel’s InfiniBand support driver has a vulnerability due to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

USN-7887-2: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

kernel: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

An out-of-bounds write vulnerability exists in the linux kernel, such that when mlx5ibgethwstats is used forthe device portnum = 0, There is a special handling in order to use the correct counters, but, portnum is being passed down the stack without any change leading to damage in system...

USN-7887-1: Linux kernel (Raspberry Pi Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

The vulnerability of the `destroy_cq_user()` function in the drivers/infiniband/hw/mlx5/cq.c driver of the Linux operating system’s InfiniBand kernel module allows a malicious actor to cause a service failure.

The vulnerability of the destroycquser function in the drivers/infiniband/hw/mlx5/cq.c driver of the Linux operating system’s InfiniBand support module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cmaCancelRoute() function in the drivers/infiniband/core/cma.c module of the Linux operating system’s kernel driver allows a hacker to gain access to protected information.

The vulnerability of the cmaCancelRoute function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the hfi1_ipoib_tx_timeout() function in the drivers/infiniband/hw/hfi1/ipoib_tx.c module of the Linux operating system’s InfiniBand driver allows a hacker to gain access to protected information.

The vulnerability of the hfi1ipoibtxtimeout function in the drivers/infiniband/hw/hfi1/ipoibtx.c module of the Linux operating system’s InfiniBand driver lies in the absence of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the cmaCancelOperation() function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver allows a malicious actor to trigger a service failure.

The vulnerability of the cmaCancelOperation function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause a service...

The vulnerability of the `ib_uverbs_ex_create_flow()` function in the drivers/infiniband/core/uverbs_cmd.c file of the Linux operating system’s kernel-based InfiniBand support driver allows a attacker to cause a service failure.

The vulnerability of the ibuverbsexcreateflow function in the drivers/infiniband/core/uverbscmd.c file of the Linux kernel’s InfiniBand support driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the hfi1_ipoib_txreq_init() function in the drivers/infiniband/hw/hfi1/ipoib_tx.c module of the Linux operating system’s InfiniBand driver allows a attacker to cause a service failure.

The vulnerability of the hfi1ipoibtxreqinit function in the drivers/infiniband/hw/hfi1/ipoibtx.c module of the Linux kernel’s InfiniBand support driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

USN-7835-6: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7835-6 linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990825 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:atkernel/workqueue.c:checkflushdependency In the commit aee2424246f9...

kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error This patch addresses a race condition for an ODP MR that can result in a CQE with an error on the UMR QP. During the mlx5ibderegmr flow, the following sequence of...

kernel: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching the QP from the radix tree again we check if the next cqe QP is identical to the one we already have. The bug however is that we are...