Lucene search
+L

121 matches found

OSV
OSV
added 2026/05/28 10:16 a.m.12 views

UBUNTU-CVE-2026-46178

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4ibcreatesrq Sashiko points out that mlx4srqalloc was not undone during error unwind, add the missing call to mlx4srqfree...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References43
Cvelist
Cvelist
added 2026/05/28 9:36 a.m.63 views

CVE-2026-46181 RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4srqevent Sashiko points out the radixtree itself is RCU safe, but nothing ever frees the mlx4srq struct with RCU, and it isn't even accessed within the RCU critical section. It also will crash...

7.8CVSS0.00114EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/28 9:36 a.m.111 views

CVE-2026-46181

Summary: CVE-2026-46181 concerns the Linux kernel RDMA/mlx4 component. The root cause is improper use of Read-Copy Update (RCU) in mlx4_srq_event(), which could allow a race where an event is delivered before the srq object is fully initialized, potentially crashing the system. The documented fix...

7.8CVSS5.8AI score0.00114EPSS
SaveExploits0References18Affected Software1
OSV
OSV
added 2026/05/28 9:36 a.m.13 views

CVE-2026-46181 RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4srqevent Sashiko points out the radixtree itself is RCU safe, but nothing ever frees the mlx4srq struct with RCU, and it isn't even accessed within the RCU critical section. It also will crash...

7.8CVSS6.2AI score
SaveExploits0References21
OSV
OSV
added 2026/05/28 9:36 a.m.14 views

CVE-2026-46178 RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4ibcreatesrq Sashiko points out that mlx4srqalloc was not undone during error unwind, add the missing call to mlx4srqfree...

7.8CVSS5.8AI score
SaveExploits0References11
CVE
CVE
added 2026/05/28 9:36 a.m.63 views

CVE-2026-46178

The CVE-2026-46178 entry concerns the Linux kernel RDMA/mlx4 component. A resource leak could occur during error handling in mlx4_ib_create_srq(), because mlx4_srq_alloc() was not undone during error unwinding. The fix adds a call to mlx4_srq_free() to properly release the resource when an error ...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/28 12:00 a.m.29 views

PT-2026-44301

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description A resource leak occurs in the RDMA/mlx4 component of the Linux kernel. The issue exists within the mlx4 ib create srq...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.12 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/core: Set the send and receive CQ pointers before forwarding them to the driver. Preset both receive and send CQ pointers prior to calling the drivers, and overwrite them again until the mlx4 is changed. Do not overwrite...

7.8CVSS6.3AI score0.00219EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/30 1:42 p.m.10 views

SUSE-SU-2026:0350-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50282: chardev: fix error handling in cdevdeviceadd bsc1249739. - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlbhandleuserfault bsc1254785. - CVE-2022-50700:...

9.8CVSS7AI score0.00954EPSS
SaveExploits2References145
SUSE Linux
SUSE Linux
added 2026/01/30 1:42 p.m.10 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50282: chardev: fix error handling in cdevdeviceadd bsc1249739. CVE-2022-50630: mm: hugetlb: fix UAF in hugetlbhandleuserfault bsc1254785. CVE-2022-50700: wifi:...

8.7CVSS7.2AI score0.00954EPSS
SaveExploits2References290
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-54168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled by the user so this shift can wrap. Fix it by using...

7.8CVSS5.9AI score0.0015EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/30 1:16 p.m.13 views

CVE-2023-54168

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled by the user so this shift can wrap. Fix it by using checkshloverflow in the same way that it was done in commit 515f60004ed9 "RDMA/hn...

7.8CVSS0.0015EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.10 views

CVE-2023-54168

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled by the user so this shift can wrap. Fix it by using checkshloverflow in the same way that it was done in commit 515f60004ed9 "RDMA/hn...

7.8CVSS6AI score0.0015EPSS
SaveExploits0References10
OSV
OSV
added 2025/12/30 1:16 p.m.25 views

UBUNTU-CVE-2023-54168

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled by the user so this shift can wrap. Fix it by using checkshloverflow in the same way that it was done in commit 515f60004ed9 "RDMA/hn...

7.8CVSS5.7AI score0.0015EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2025/12/30 12:08 p.m.35 views

CVE-2023-54168 RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled by the user so this shift can wrap. Fix it by using checkshloverflow in the same way that it was done in commit 515f60004ed9 "RDMA/hn...

7.8CVSS0.0015EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/30 12:08 p.m.11 views

CVE-2023-54168 RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled by the user so this shift can wrap. Fix it by using checkshloverflow in the same way that it was done in commit 515f60004ed9 "RDMA/hn...

7.8CVSS6.4AI score
SaveExploits0References11
CVE
CVE
added 2025/12/30 12:08 p.m.34 views

CVE-2023-54168

CVE-2023-54168 – Linux kernel (RDMA/mlx4): The vulnerability arises in the mlx4 RDMA path where user-controlled ucmd->log_sq_bb_count enables an integer shift that can wrap, due to lack of overflow checks. The fix replaces the vulnerable shift with a check_shl_overflow() pattern (same approach...

7.8CVSS6.1AI score0.0015EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:00 a.m.8 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989447 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx4en: Fix an use-after-free bug in mlx4entryallocresources In mlx4entryallocresources,...

7.8CVSS6.1AI score0.00295EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2010-5289

Malware in sbrugna...

5.6CVSS5.5AI score0.00387EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:00 a.m.2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987133 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx4en: Fix an use-after-free bug in mlx4entryallocresources In mlx4entryallocresources,...

7.8CVSS6.1AI score0.00295EPSS
SaveExploits0References4
Rows per page
Query Builder