PT-2021-26672

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.15 Description: A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-30532

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.76 Description A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15 Description The issue is related to a possible corruption of the req-offset in nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5....

CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

QEMU 缓冲区错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. The QEMU NVME component suffers from a buffer error vulnerability that arises when a networked system or product performs an operation in memor...

nvme-cli bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

nvme-cli bug fix and enhancement update

An update is available for nvme-cli. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

Unbreakable Enterprise kernel security update

4.1.12-124.57.1 - target; fix print statement warning John Donnelly Orabug: 33495661 - enic;: fix warning on moduleparam disablevlan0, John Donnelly Orabug: 33495661 - bnx2fc: correct BNX2FCTMTIMEOUT to be 60 sec John Donnelly Orabug: 33495661 - target: Fix linux-4.1.y specific compile warning...

GSD-2021-1001907 nvme-pci: Fix abort command id

nvme-pci: Fix abort command id This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit 5ccd69157a9a043f1fbcf7d6a09bcb7829b845aa, it w...

UVI-2021-1001907 nvme-pci: Fix abort command id

nvme-pci: Fix abort command id This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit 5ccd69157a9a043f1fbcf7d6a09bcb7829b845aa, it w...

GSD-2021-1001860 nvme-pci: Fix abort command id

nvme-pci: Fix abort command id This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit 6fecdb5b54a5d37e5c018307ea9180502c85d158, it w...

UVI-2021-1001860 nvme-pci: Fix abort command id

nvme-pci: Fix abort command id This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit 6fecdb5b54a5d37e5c018307ea9180502c85d158, it w...

PT-2021-30325

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.67 through v5.10.74 Description The issue is related to the nvme-pci component. It was introduced in version v5.10.67 and fixed in version v5.10.75. The actual impact and attack plausibility have not yet been proven...

PT-2021-26330

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10.67 through v5.10.74 Description: The issue is related to the nvme-pci component. It was introduced in version v5.10.67 and fixed in version v5.10.75. The actual impact and attack plausibility have not yet been...

PT-2021-26377

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14.6 through v5.14.14 Description: The issue is related to the nvme-pci module. It was introduced in version v5.14.6 and fixed in version v5.14.14. The actual impact and attack plausibility have not yet been proven...

PT-2021-30372

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14.6 through v5.14.14 Description The issue is related to the nvme-pci component. It was introduced in version v5.14.6 and fixed in version v5.14.14. The actual impact and attack plausibility have not yet been proven...

UVI-2021-1001745 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

GSD-2021-1001745 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

UVI-2021-1001663 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...

GSD-2021-1001663 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...