kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()

A flaw was found in the Linux kernel's RDMA/mlx5 component. An error path fall-through in the mlx5ibdevressrqinit function, specifically when ibcreatesrq fails, can lead to the use of freed memory and error pointers. This memory corruption vulnerability could result in system instability, denial ...

kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

A flaw was found in the Linux kernel's RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update RCU in the mlx4srqevent function. An attacker could potentially trigger an event before the srq object is fully initialized, leading to a system crash. This could resul...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 and kpatch-patch-5_14_0-687_42_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_161_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

A flaw was found in the Linux kernel's RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update RCU in the mlx4srqevent function. An attacker could potentially trigger an event before the srq object is fully initialized, leading to a system crash. This could resul...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

A flaw was found in the Linux kernel's RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update RCU in the mlx4srqevent function. An attacker could potentially trigger an event before the srq object is fully initialized, leading to a system crash. This could resul...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, kpatch-patch-5_14_0-284_172_1, and kpatch-patch-5_14_0-284_188_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

A flaw was found in the Linux kernel's RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update RCU in the mlx4srqevent function. An attacker could potentially trigger an event before the srq object is fully initialized, leading to a system crash. This could resul...

CVE-2026-98252

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. This flaw allows a local attacker to cause a denial of service DoS due to a race condition in the iWARP port mapper component. Because request structures are added to a shared tracking list before their reference...

CVE-2026-98352

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Transport client driver. A race condition occurs when a connection setup attempt is interrupted during teardown, causing shared Completion Queue CQ resources to be retained without being released. This flaw may allow an...

CVE-2026-98323

A flaw was found in the Linux kernel's Software iWARP siw Remote Direct Memory Access RDMA driver. When handling extended protocol headers split across multiple network packets, the driver incorrectly calculates the remaining length during the copy operation, leading to an out-of-bounds memory...

CVE-2026-98253

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. A local attacker can cause a Denial of Service DoS or memory corruption by exploiting a race condition in the User Connection Manager Access ucma component. This issue occurs when concurrent multicast join requests...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

CVE-2026-98367

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Soft-iWARP siw driver. A race condition occurs during connection handling if modifying a queue pair fails, releasing an internal lock before error cleanup completes. A local attacker could exploit this timing window through...

CVE-2026-98366

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA software driver. A local user can exploit this vulnerability to cause a Denial of Service DoS or potentially gain elevated privileges by triggering a use-after-free memory flaw. This issue occurs because the driver updates...

CVE-2026-98365

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA software driver. An unauthenticated remote attacker can cause a Denial of Service DoS or out-of-bounds memory access by sending specially crafted network requests that trigger an integer overflow during memory range validatio...

kernel: RDMA/rxe: Fix race condition in QP timer handlers

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA RXE component. A race condition exists between the retransmittimer and rxedestroyqp functions. This can cause a Queue Pair QP reference count to underflow, leading to a use-after-free vulnerability. A local attacker could...

kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...