USN-9031-1 linux-aws-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - HID subsystem; - InfiniBand drivers; - Network drivers; - PCI subsystem; - SCSI subsystem; - JFS file system; -...

USN-9018-1 linux, linux-aws, linux-gcp, linux-ibm, linux-oem-7.0, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file systems library; - Stream parser; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture;...

USN-8960-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

SUSE CVE-2026-99166

In the Linux kernel, the following vulnerability has been resolved: net: rds: fix uninitialized trans dereference in CM event handler rdsrdmacmeventhandlercmn assigns trans only when the RDMA device is an InfiniBand CA RDMANODEIBCA. On any other device type, e.g. an iWARP RNIC such as siw, trans...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.6. It stems from rdsrdmacmeventhandlercmn failing to initialize trans and dereference it on non-InfiniBand devices, potentially leading to a kernel crash...

Linux Distros Unpatched Vulnerability : CVE-2026-99166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: rds: fix uninitialized trans dereference in CM event handler rdsrdmacmeventhandlercmn assigns trans only when the RDMA device is an InfiniBand CA...

Linux rdma_create_ah Heap Buffer Overflow DoS

The vulnerability of the rdmacreateah function in the drivers/infiniband/core/verbs.c file of the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8630-2)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8630-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

CVE-2026-98524

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When memory region mapping fails during InfiniBand operations, the kernel can retain a stale reference to memory buffers that have already been released. A local attacker could exploit this flaw to trigger a...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRPRSP sense copy by the received length srpprocessrsp copies sense data from rsp-data + respdatalen, where respdatalen is the full 32-bit value supplied by the SRP target and is never checked against the number o...

Linux srpt_get_desc_tbl Heap Buffer Overflow DoS

The vulnerability in the srptgetdesctbl function within the drivers/infiniband/ulp/srpt/ibsrpt.c file of the Linux kernel is related to improper calculation. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality, integrity, and availability of protected...

Linux kernel Infiniband verbs RCE

The vulnerability in the Linux kernel’s drivers/infiniband/hw/irdma/verbs.c component is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected information...

Linux kernel Infiniband verbs Data Compromise

The vulnerability in the drivers/infiniband/hw/irdma/verbs.c and drivers/infiniband/hw/irdma/verbs.h components of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality and availabili...

Linux drivers/infiniband/sw/rxe/rxe_resp.c Buffer Overflow DoS

The vulnerability in the drivers/infiniband/sw/rxe/rxeresp.c component of the Linux kernel stems from inadequate resource management during its existence. Exploitation of this vulnerability may enable an attacker to compromise the confidentiality, integrity, and availability of protected...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the setrqsize function within the drivers/infiniband/hw/mlx5/qp.c component of the Linux kernel operating system is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...

Linux Infiniband HW mlx5 main.c Data Compromise

The vulnerability in the drivers/infiniband/hw/mlx5/main.c component of the Linux kernel is related to insufficient control over dynamically managed resources. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected...

Linux kernel DoS

The vulnerability in the drivers/infiniband/hw/mlx5/devx.c component of the Linux kernel is related to dereferencing pointers. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IWCMEVENTCONNECTREPLY event If siwrecvmparr returns -EAGAIN, it means that the MPA reply has not been received completely; in such cases, IWCMEVENTCONNECTREPLY should not be reported. This may...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix sdma.h tx-numdescs off-by-one error Unfortunately, the commit fd8958efe877 introduced another error that causes the descs array to overflow. This results in further crashes that are easily reproducible via the sendms...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Do not use the WQMEMRECLAIM flag for the workqueue. The issue was reported by a customer during SRIOV testing. When both the i40e and i40iw drivers are loaded, a warning is triggered in the checkFlushDependency function...