1916 matches found
SUSE CVE-2026-72006
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5stidxdata on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak one struct mlx5stidxdata per cycle; kmemleak flags it as unreferenced...
SUSE CVE-2026-72032
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget fails, the replacement matcher is not...
ROS-20260827-73-0025
The vulnerability of the mlx5drcmdcreatereformatctx function in the drivers/net/ethernet/mellanox/mlx5/core/steering/drcmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could...
SUSE CVE-2026-74296
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one Free the UAR index returned by the hardware...
SUSE CVE-2026-74297
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as "1 rqwqeshift" based on the user-provided rqwqeshift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shi...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098846)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098846 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching th...
Mellanox Ethernet Network Adapter Heap Buffer Overflow
The vulnerability of the mlx5eskbfromcqempwrqnonlinear function in the drivers/net/ethernet/mellanox/mlx5/core/enrx.c file of the Ethernet Mellanox network adapter driver in the Linux operating system is related to errors in resource counters. Exploiting this vulnerability could allow an attacker...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104608)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104608 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as 1...
Mellanox Ethernet driver Network Information Disclosure
The vulnerability of the functions removeunreadyflow and mlx5etcdelfdbflow in the driver/net/ethernet/mellanox/mlx5/core/entc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this...
Mellanox Ethernet Network Adapter Driver Heap Buffer Overflow DoS
The vulnerability of the mlx5enicinit function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...
Mellanox Ethernet network adapter driver Heap Buffer Overflow DoS
The vulnerability of the mlx5etcqueryroutevport function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability may allow an attacker to cause a...
CVE-2026-74717
A flaw was found in the Linux kernel's net/mlx5 component. This vulnerability occurs because the firmware tracer fwtracer does not properly handle error return values, specifically when ERRPTR is returned instead of NULL. An attacker could potentially trigger a kernel panic by exploiting this...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Fixed the issue where UMR XLT cleanup was performed during ODDP population failures. The mlx5rumrupdatexlt function allocates and DMA maps an XLT buffer using mlx5rumrcreatexlt. The buffer is released through the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: The free mlx5stidxdata operation in the final deallocation step was corrected. Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g., churning RDMA MRs cause a leak of one struct...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG – Fixed an off-by-one issue in the rollback of single-FDB errors. When a failure occurs at index i, the reverse cleanup loop in mlx5lagcreatesinglefdb starts from i. As a result, the failed index itself is rolled...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: HWS, fixed the leak in the match matcher during the resize target setup failure. The hwsbwcmatchermove function allocates a replacement match matcher before setting it as the resize target. If...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Nullifies the cq-dbg pointer in mlx5debugcqRemove Before this patch, if mlx5CoreDestroyCq failed, the destruction operations continued. However, mlx5CoreDestroyCq could be called again by the user, causing additional...
CVE-2026-74712
A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...
`en_accel/ipsec.c` component of `drivers/net/ethernet/mellanox/mlx5/core` DoS
The vulnerability in the drivers/net/ethernet/mellanox/mlx5/core/enaccel/ipsec.c component of the Linux kernel is related to a race condition associated with context switching. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Linux RDMA/mlx5 DoS
The vulnerability of the RDMA/mlx5 component of the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...