CVE-2026-93154

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring MRs Prevent userspace from deregistering the MRs that back QP/CQ/SRQ rings by bumping the MR's refcount upon association...

AZL-101954 CVE-2026-93107 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state When docomplete finds the QP in the error state it returns RESPSTCHKRESOURCE. Before commit 49dc9c1f0c7e "RDMA/rxe: Cleanup reset state handling ...

DEBIAN-CVE-2026-90308

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from dev-qpxa and then use or reference them outside the xarray lock. erdmadestroyqp can drop the destroy-path reference and...

EUVD-2026-82262

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring MRs Prevent userspace from deregistering the MRs that back QP/CQ/SRQ rings by bumping the MR's refcount upon association...

CVE-2026-93154 RDMA/irdma: Add refcounting to user ring MRs

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring MRs Prevent userspace from deregistering the MRs that back QP/CQ/SRQ rings by bumping the MR's refcount upon association...

CVE-2026-93107 RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state When docomplete finds the QP in the error state it returns RESPSTCHKRESOURCE. Before commit 49dc9c1f0c7e "RDMA/rxe: Cleanup reset state handling ...

CVE-2026-92513

CVE-2026-92513 is a use-after-free vulnerability in the Linux kernel's mana_ib RDMA driver (Microsoft Azure MANA InfiniBand). The root cause lies in mana_table_store_ud_qp(), which publishes a QP at its send-queue ID before inserting the receive-queue ID, dropping the XArray lock between the two ...

EUVD-2026-81969

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from dev-qpxa and then use or reference them outside the xarray lock. erdmadestroyqp can drop the destroy-path reference and...

CVE-2026-90308

CVE-2026-90308 is a use-after-free race condition in the Linux kernel's RDMA/erdma subsystem. AE QP fatal events and iWARP CM paths load queue pairs from dev->qp_xa and then reference them outside the xarray lock, while erdma_destroy_qp() can concurrently free those QP resources. The fix intro...

CVE-2026-90172 smb: smbdirect: destroy QP before mem pools on accept failure

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: destroy QP before mem pools on accept failure On the rdmaacceptfailed error path of smbdirectacceptconnectrequest, the receive io posted just above is owned by the QP recvio is set to NULL after a successful post...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet: A possible leak has been fixed when destroying a ctrl during qp establishment. In nvmetsqdestroy, we capture sq-ctrl early. If it is not NULL, we know that a ctrl was allocated during the admin connect request handling. We...

Linux Distros Unpatched Vulnerability : CVE-2026-80988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ntb: Drop packets when qp link is down meant to make ntbtransporttxenqueue drop...

CVE-2026-80988

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When the NTB transport attempts to transmit packets while the Queue Pair QP link is down, the system incorrectly reports a successful transmission without properly consuming the packet. This oversight leads to a...

DEBIAN-CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

AZL-100550 CVE-2026-80988 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

UBUNTU-CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988 NTB: ntb_transport: Fail TX enqueue when the QP link is down

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

EUVD-2026-76311

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...