PT-2022-7491 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a slab-out-of-bounds problem in the mlx5 cmd dr create fte function when adding a rule with 32 destinations. This can cause an out-of-band access issue, leading...

GSD-2022-1000208 net/mlx5: Use del_timer_sync in fw reset flow of halting poll

net/mlx5: Use deltimersync in fw reset flow of halting poll This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.97 by commit...

PT-2022-28486

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.97 Description A potential security issue exists in the net/mlx5 module of the Linux Kernel. The issue is related to the use of del timer sync in the firmware reset flow of halting poll. The actual impact a...

PT-2022-7460

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's net-sysfs component can cause a panic when bringing down a network device or during system shutdown. This occurs because the device is already remov...

PT-2022-28550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.20 Description The issue is related to the net/mlx5 driver in the Linux Kernel. It involves the use of del timer sync in the firmware reset flow of halting poll. The actual impact and attack plausibility ha...

GSD-2021-1002720 RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow

RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

PT-2021-27188

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.9 Description A potential security issue exists in the RDMA/mlx5 component, related to releasing unallocated memory in the dereg MR flow. The actual impact and attack plausibility have not yet been...

PT-2021-7679 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.13 Description: The issue is related to the misinterpretation of the mlx5 get uars page return value in the dr domain.c file of the Linux kernel, which expects it to be NULL in the error case, but it is...

Unbreakable Enterprise kernel security update

5.4.17-2136.302.6.1 - rds/ib: Use both iova and key in freemr socket call aru kolappan Orabug:33667276 5.4.17-2136.302.6 - Revert fs: align IOCB flags with RWF flags Prasad Singamsetty Orabug: 33627551 5.4.17-2136.302.5 - Revert drm: Initialize struct drmcrtcstate.novblank from device settings...

GSD-2021-1002319 net/mlx5: Update error handler for UCTX and UMEM

net/mlx5: Update error handler for UCTX and UMEM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

PT-2021-26789

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to an update error handler for UCTX and UMEM in the net/mlx5 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-26790

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to a potential security vulnerability in the net/mlx5e module. It involves the nullification of the cq-dbg pointer in the mlx5 debug cq remove function. The actual impac...

PT-2021-30785

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description The issue is related to the net/mlx5e module in the Linux Kernel. It involves the removal of a debug pointer in the mlx5 debug cq remove function. The actual impact and attack plausibility hav...

PT-2021-30750

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.75 through 5.10.81 Description A potential issue exists in the net/mlx5e module, specifically in the mlx5 debug cq remove function, where the cq-dbg pointer is not properly nullified. The actual impact and attack...

PT-2021-30784

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description The issue is related to an update error handler for UCTX and UMEM in the net/mlx5 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26755

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.75 through 5.10.81 Description: A potential issue exists in the net/mlx5e component, where the cq-dbg pointer is not properly nullified in the mlx5 debug cq remove function. The actual impact and attack plausibility...

WS-2021-0471

In Linux/Kernel is vulnerable tocrash in RX resync flow in drivers/net/ethernet/mellanox/mlx5/core/enaccel/ktlsrx.c...

PT-2021-8152

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the mlx5 component of the Linux kernel and is caused by incorrect error handling in the mlx5 internal err ret value function. This can lead to a denial of...

PT-2021-8171

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc5 for upstream min debug 2021 10 14 11 06 Description The vulnerability is related to a null pointer dereference in the mlx5 debug cq remove function. If mlx5 core destroy cq fails, it proceeds with the...

GSD-2021-1002207 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...