kernel: RDMA/core: Fix null-ptr-deref in ib_core_cleanup()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix null-ptr-deref in ibcorecleanup KASAN reported a null-ptr-deref error: KASAN: null-ptr-deref in range 0x0000000000000118-0x000000000000011f CPU: 1 PID: 379 Hardware name: QEMU Standard PC i440FX + PIIX, 1996 RIP:...

PT-2025-18642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-ptr-deref error was reported in the Linux kernel's RDMA/core. The issue occurs because the failure of roce gid mgmt init is ignored, leading to the destruction of an unallocated...

SUSE CVE-2014-2739

The cmareqhandler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet aka RoCE address that is properly resolved within a different module, which allows remote attackers to cause a denial of service incorrect...

SUSE CVE-2016-8636

Integer overflow in the memcheckrange function in drivers/infiniband/sw/rxe/rxemr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service memory corruption, obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read...

SUSE CVE-2019-16921

In the Linux kernel before 4.17, hnsroceallocucontext in drivers/infiniband/hw/hns/hnsrocemain.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813...

PT-2023-34183

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.85 Description A memory leak issue exists in the hns roce alloc mr function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.8 through...

PT-2023-33772

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A memory leak issue exists in the hns roce alloc mr function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v6.0.16,...

PT-2023-34495

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A memory leak issue exists in the hns roce alloc mr function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.163...

PT-2022-38226

Уязвимость функции hns roce alloc mr модуля drivers/infiniband/hw/hns/hns roce mr.c драйвера InfiniBand ядра операционной системы Linux связана с неправильным освобождением памяти «утечка памяти». Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-49693

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the hns roce alloc mr function within the RDMA/hns module of the Linux kernel. Specifically, when the hns roce mr enable function fails, the mr key is not release...

kernel: RDMA/irdma: Fix sleep from invalid context BUG

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qosmutex to process RoCEv2 QP's on netdev events causes a kernel splat. Fix this by removing the handling for RoCEv2 in irdmacmteardownconnections that uses the mutex. Thi...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1142-1 Rating: important References: 1065729 1085224 1094840 1113295 1153274 1154353 1156395 1179243 1183871 1184114 1184350 1184631 1185377 1185902 1186194 1186264 1186482 1187476 1188101 1188405...

Unbreakable Enterprise kernel security update

4.14.35-1902.8.4 - Revert 'oled: give panic handler chance to run before kexec' John Donnelly Orabug: 30594702 - Revert 'oled: export symbols' John Donnelly Orabug: 30594702 - net/rds: Recycle RDS headers to speed up connection fail over Ka-Cheong Poon Orabug: 30628735 - net/rds: Reduce RDS heade...

CVE-2019-16921

In the Linux kernel before 4.17, hnsroceallocucontext in drivers/infiniband/hw/hns/hnsrocemain.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813...

UBUNTU-CVE-2019-16921

In the Linux kernel before 4.17, hnsroceallocucontext in drivers/infiniband/hw/hns/hnsrocemain.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813...

Denial Of Service (DOS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way IP packets with an Internet Header Length ihl of zero were processed in the skbflowdissect function in the Linux kernel. A remote attacker could use this flaw to trigger an infinit...

Weak Cryptographic Protection

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way IP packets with an Internet Header Length ihl of zero were processed in the skbflowdissect function in the Linux kernel. A remote attacker could use this flaw to trigger an infinit...

PT-2019-14868

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17 Description The issue is related to the hns roce alloc ucontext function in the Linux kernel, which does not properly initialize the resp data structure. This could potentially allow attackers to obtain...

Integer overflow

Integer overflow in the memcheckrange function in drivers/infiniband/sw/rxe/rxemr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service memory corruption, obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read...

CVE-2016-8636

Integer overflow in the memcheckrange function in drivers/infiniband/sw/rxe/rxemr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service memory corruption, obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read...