CVE-2026-98967

A flaw was found in the Linux kernel's cxgb4 network driver. During connection cleanup or error handling, the driver removes entries from an internal tracking table without disabling software interrupts. If concurrent network traffic triggers an interrupt on the same processor core during this...

DEBIAN-CVE-2026-98967

In the Linux kernel, the following vulnerability has been resolved: cxgb4/chktls: disable softirqs around tidlist erases chcrktlscplactopenrpl inserts into tidlist from the receive path using xainsertbh. The array is shared by the adapter's connections and initialized with XAFLAGSLOCKBH. However,...

CVE-2026-98967

In the Linux kernel, the following vulnerability has been resolved: cxgb4/chktls: disable softirqs around tidlist erases chcrktlscplactopenrpl inserts into tidlist from the receive path using xainsertbh. The array is shared by the adapter's connections and initialized with XAFLAGSLOCKBH. However,...

UBUNTU-CVE-2026-98967

In the Linux kernel, the following vulnerability has been resolved: cxgb4/chktls: disable softirqs around tidlist erases chcrktlscplactopenrpl inserts into tidlist from the receive path using xainsertbh. The array is shared by the adapter's connections and initialized with XAFLAGSLOCKBH. However,...

CVE-2026-98967

The Linux kernel contains a vulnerability in the cxgb4/ch_ktls component where the tid_list array is handled inconsistently. Specifically, while the receive path correctly uses xa_insert_bh(), the chcr_ktls_dev_del() and chcr_ktls_dev_add() error paths incorrectly use xa_erase(). Because xa_erase...

CVE-2026-98967 cxgb4/ch_ktls: disable softirqs around tid_list erases

In the Linux kernel, the following vulnerability has been resolved: cxgb4/chktls: disable softirqs around tidlist erases chcrktlscplactopenrpl inserts into tidlist from the receive path using xainsertbh. The array is shared by the adapter's connections and initialized with XAFLAGSLOCKBH. However,...

CVE-2026-98967

In the Linux kernel, the following vulnerability has been resolved: cxgb4/chktls: disable softirqs around tidlist erases chcrktlscplactopenrpl inserts into tidlist from the receive path using xainsertbh. The array is shared by the adapter's connections and initialized with XAFLAGSLOCKBH. However,...

CVE-2026-98967 cxgb4/ch_ktls: disable softirqs around tid_list erases

In the Linux kernel, the following vulnerability has been resolved: cxgb4/chktls: disable softirqs around tidlist erases chcrktlscplactopenrpl inserts into tidlist from the receive path using xainsertbh. The array is shared by the adapter's connections and initialized with XAFLAGSLOCKBH. However,...

Linux Distros Unpatched Vulnerability : CVE-2026-98967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxgb4/chktls: disable softirqs around tidlist erases chcrktlscplactopenrpl inserts into tidlist from the receive path using xainsertbh. The array is shared by t...

CVE-2026-90417

A flaw was found in the Linux kernel's RDMA/cxgb4 component. When the device enters a fatal error state or experiences an allocation failure within the writetptentry function, it can lead to a memory leak and a double free vulnerability. A local attacker could potentially exploit this issue to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32-bit systems. The “gl-totlen” variable is controlled by the user. It originates from processresponses. On 32-bit systems, the expression “gl-totlen + sizeofstruct cplpassacceptr...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: The STAG index is freed when the write operation of the TPT entry fails. The writetptentry function allocates a new STAG index using c4iwgetresource, and bumps the stats.stag.cur value before programming the entry. Wh...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iwcxgb4: Fix potential NULL dereference in c4iwfillrescmidentry This condition must match the previous “if epcp-state == LISTEN ” exactly to prevent a NULL dereference of either “listenep” or “ep”. The issue arises because “epcp”...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: A potential null-ptr-deref issue was fixed in passestablish. If getepfromtid fails to find a non-NULL value for ep, ep will be dereferenced later, regardless of whether it is empty. This patch adds a simple sanity che...

CVE-2026-90415

A flaw was found in the Linux kernel's RDMA/cxgb4 driver. This vulnerability occurs when the system fails to properly free a Steering Tag STAG index after an unsuccessful attempt to write to adapter memory. This leads to a resource leak, which could be exploited by a local attacker to cause a...

CVE-2026-90219

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access cxgb4 module. When an RDMA device registration fails, the debugfs entries, which are used for debugging, are not properly deallocated. This oversight can lead to a resource leak, where these entries persist in memory even aft...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1782145985)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1782145985 advisory. - Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists. CVE-2019-102...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1780076591)

"The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1780076591 advisory. - An issue was discovered in writetptentry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver...

SUSE CVE-2026-90219

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Free debugfs on registration failure c4iwalloc creates the per-device debugfs tree dev-debugfsroot via setupdebugfs, but it is removed only in c4iwremove, not in c4iwdealloc. When RDMA device registration fails, the...

SUSE CVE-2026-90415

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: free STAG index when TPT entry write fails writetptentry allocates a new STAG index with c4iwgetresource and bumps stats.stag.cur before programming the entry. When writeadaptermem fails, it returns the error without...