GSD-2022-1002579 net/mlx5: E-Switch, pair only capable devices

net/mlx5: E-Switch, pair only capable devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

RLSA-2022:5316 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...

PT-2022-31642

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.46 Description The issue concerns the net/mlx5 component in the Linux Kernel, where the FTE is not properly deleted when there are no rules attached to it. The actual impact and attack plausibility of this...

PT-2022-31192

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue concerns the net/mlx5 E-Switch, where only pair capable devices are affected. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior ...

PT-2022-30842

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.18.3 Description The issue concerns the net/mlx5 E-Switch, where only pair capable devices are affected. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-31369

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.14 Description The issue concerns the net/mlx5 component, specifically the handling of the FTE when there are no rules attached to it. The actual impact and attack plausibility have not yet been proven...

PT-2022-32031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the net/mlx5 component in the Linux Kernel, where the FTE is not properly deleted when there are no rules attached to it. The actual impact and attack plausibility hav...

PT-2022-31867

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the net/mlx5 component in the Linux Kernel, where the Flow Steering Table Entry FTE is not properly deleted when there are no rules attached to it. This is an automated ID...

PT-2022-31078

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.18.3 Description The issue concerns the net/mlx5 component in the Linux Kernel, where the Flow Steering Table Entry FTE is not properly deleted when there are no rules attached to it. This is an automated...

PT-2025-8267

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc7+ Description The issue is related to the Linux kernel, specifically with the mlx5 get next phys dev function, which was called without holding the interface lock. This problem was identified when a...

PT-2022-38136

Уязвимость функции mlx5e init rep tx модуля drivers/net/ethernet/mellanox/mlx5/core/en rep.c драйвера поддержки сетевых адаптеров Ethernet Mellanox ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

GSD-2022-1002242 RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002080 RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001838 RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001521 RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001205 RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30353

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and potential for attack have not been fully...

PT-2022-29478

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.17.1 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and potential for attack have not been fully...

PT-2022-30111

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.15.32 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and potential for attack have not been proven yet...

PT-2022-30515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and potential for attack have not been fully determine...