AZL-99321 CVE-2026-78662 affecting package packer for versions less than 1.9.5-21

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

The vulnerability of the mmput() function in the IB/core component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mmput function in the IB/core component of the Linux operating system’s kernel is related to deadlocking as part of the ODP process. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2021-47392

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix listener leak in rdmacmalistenonall failure If cmalistenonall fails it leaves the per-device ID still on the listenlist but the state is not set to RDMACMADDRBOUND. When the cmid is eventually destroyed...

CVE-2024-26726 btrfs: don't drop extent_map for free space inode on write error

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't drop extentmap for free space inode on write error While running the CI for an unrelated change I hit the following panic with generic/648 on btrfsholesspacecache. assertion failed: blockstart != EXTENTMAPHOLE, in...