Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151080 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isertsenddone...

Unbreakable Enterprise kernel security update

5.4.17-2136.361.4.1 - iommu/amd: Force device table to maximum size Suravee Suthikulpanit Orabug: 40172712 CVE-2024-21963 - x86/microcode/AMD: Increase PATCHMAXSIZE for Family 1Ah Saeed Mirzamohammadi Orabug: 40172712 5.4.17-2136.361.4 - vhost-scsi: zero misaligned I/O bounce pages Shubham Antil...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isertrecvdone passes each received PDU to the opcode handlers without ever checking wc-bytelen, which represents the actual number of bytes the HCA placed into the recei...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until the session is registered isertputlogintx puts the final Login Response on the wire before transportregistersession, which iscsipostloginhandler reaches only after iscsitargetdologin...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing begins reassembly for active DATA responses prior to matching them to any outstanding sends. The actual matching occurs later, after...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: IB/isert: Post the full-feature receive buffers after session registration isertputlogintx posts the full-feature receive buffers before transportregistersession runs; thus, an initiator that does not wait for the final Login...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data than was received isertloginrecvdone records how many bytes the HCA actually placed in the login buffer, but nothing compares that against the length the login PDU’s BHS declares...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146816 advisory. In the Linux kernel, the following vulnerability has been resolved: rds: ib: use rdsconndrop on protocol version mismatch rdsibcmconnectcomplete runs from the RDMA-C...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146682)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146682 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isertrecvdone hands each received PD...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146695)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146695 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/isert: post the full-feature receive buffers after session registration isertputlogintx posts...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146702)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146702 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until the session is registered isertputlogintx puts th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146829 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isertsenddone...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146269 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing...

CVE-2026-80880

A flaw was found in the Linux kernel's IB/mlx5 component. Improper handling of implicit On-Demand Paging ODP memory registration reregmr and interactions with child memory keys can lead to a race condition. This occurs because changes to a parent memory key necessitate a complete rebuild, and...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142713 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing...

CVE-2026-90413

A flaw was found in the Linux kernel's IB/isert component. A remote attacker can exploit this vulnerability by sending a specially crafted login Protocol Data Unit PDU that declares a larger data segment length than the actual data received. This discrepancy causes an out-of-bounds read during...

Linux Distros Unpatched Vulnerability : CVE-2026-98524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rds: ib: Clear the sg list when mapping an MR fails rdsibmapfrmr stores the caller's scatterlist in the MR before DMA mapping and registration can fail. On...

CLSA-2025-1746479711 kernel-uek: Fix of 225 CVEs

sctp: sysctl: authenable: avoid using current-nsproxy - sctp: sysctl: cookiehmacalg: avoid using current-nsproxy CVE-2025-21640 - bpf: Use preemptcount directly in bpfsendsignalcommon - Revert "sctp: sysctl: cookiehmacalg: avoid using current-nsproxy" - jfs: fix slab-out-of-bounds read in eaget -...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: RDMA/manaib: Disable RX steering on RSS QP destruction When an RSS QP is destroyed e.g., after DPDK exits, manaibdestroyqprss destroys the RX WQ objects but does not disable vPort RX steering in the firmware. This results in a...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix fence put before wait in amdgpuamdkfdsubmitib amdgpuamdkfdsubmitib submits a GPU job and receives a fence from amdgpuibschedule. This fence is used to wait for the job to complete. Currently, the code drops the...