GSD-2023-1002153 net: mlx5: eliminate anonymous module_init & module_exit

net: mlx5: eliminate anonymous moduleinit & moduleexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...

GSD-2023-1002075 net: mlx5: eliminate anonymous module_init & module_exit

net: mlx5: eliminate anonymous moduleinit & moduleexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...

GSD-2023-1001993 net/mlx5: Fix command stats access after free

net/mlx5: Fix command stats access after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-35332 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.272 Description: The issue is related to the elimination of anonymous module init and module exit in the net: mlx5 module. The actual impact and attack plausibility have not yet been proven. Recommendation...

Unbreakable Enterprise kernel security update

5.15.0-7.86.6.1 - net/rds: Delegate fan-out to a background worker Gerd Rausch Orabug: 35051226 5.15.0-7.86.6 - runtime revert of virtionet: Stripe queue affinities across cores. Konrad Rzeszutek Wilk Orabug: 35001044 - rds: ib: Make sure messages that errors out also get unmapped Hakon Bugge...

PT-2023-35004 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to the elimination of anonymous module init and module exit in the net: mlx5 module. The actual impact and attack plausibility have not yet been proven. It was introduced...

PT-2023-35151 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue is related to the elimination of anonymous module init and module exit in the net: mlx5 module. The actual impact and attack plausibility have not yet been proven. Recommendations...

GSD-2023-1001700 net/mlx5: Fix command stats access after free

net/mlx5: Fix command stats access after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-34776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v6.1.6 Description: The issue is related to a potential security vulnerability in the net/mlx5 module. It involves fixing command stats access after free, which may have security implications. The actual...

GSD-2023-1000878 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

RDMA/mlx5: Fix mlx5ibgethwstats when used for device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000409 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

RDMA/mlx5: Fix mlx5ibgethwstats when used for device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000054 net/mlx5: Lag, avoid lockdep warnings

net/mlx5: Lag, avoid lockdep warnings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit ff24a802204620214afa75a5e64280f40015e399...

PT-2023-33131 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to the net/mlx5 component, which may cause a lag and produce lockdep warnings. The actual impact and potential for exploitation have not been proven yet. Recommendations...

PT-2023-33486 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the RDMA/mlx5 component, specifically with the mlx5 ib get hw stats function. It is noted that the actual impact and attack plausibility have not yet been proven. The...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.315.5 - Revert 'xfs: fix use-after-free on CIL context on shutdown' Sherry Yang Orabug: 34917369 5.4.17-2136.315.4 - net/mlx5: Suppress error logging on UCTX creation Marina Orabug: 34888473 - uek-rpm: Add ptpkvm.ko to nano rpm Somasundaram Krishnasamy Orabug: 33487655 - block: fix RO...

Unbreakable Enterprise kernel security update

4.14.35-2047.521.4 - tcp: Tunables for TCP delayed ack min and max timers Venkat Venkatsubra Orabug: 34883100 4.14.35-2047.521.3 - Revert 'random: use expired timer rather than wq for mixing fast pool' Saeed Mirzamohammadi Orabug: 34918228 4.14.35-2047.521.2 - RDS/IB: Fix the misplaced counter...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2024-11814 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel, specifically in the net/mlx5 module. The issue occurs when a command fails while the driver is reloading and cannot accept firmwa...

PT-2022-7688 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mlx5 eswitch add termtbl rule function in the Linux kernel, which is associated with the reuse of previously freed memory. This can potentially allow an...

Important: Red Hat Security Advisory: dpdk security and bug fix update

An update for dpdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...