GSD-2021-1001060 net/mlx5e: Fix page reclaim for dead peer hairpin

net/mlx5e: Fix page reclaim for dead peer hairpin This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1000980 net/mlx5e: Fix page reclaim for dead peer hairpin

net/mlx5e: Fix page reclaim for dead peer hairpin This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

PT-2021-29525

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description The issue is related to page reclaim for dead peer hairpin in net/mlx5e. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25451

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.19 through 5.10.45 Description: The issue is related to a page reclaim problem for a dead peer hairpin in the net/mlx5e component. The actual impact and potential for attack have not been proven yet. Recommendations: F...

PT-2021-25531

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: The issue is related to a page reclaim problem for a dead peer hairpin in the net/mlx5e component. The actual impact and potential for attack have not been proven yet. Recommendations: For...

PT-2021-29383

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description The issue is related to a page reclaim problem for a dead peer hairpin in the net/mlx5e component. The actual impact and potential for attack have not been proven yet. Recommendations For Lin...

PT-2021-29445

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19 through 5.10.45 Description The issue is related to a page reclaim problem for a dead peer hairpin in the net/mlx5e component. The actual impact and potential for attack have not been proven yet. Recommendations For...

PT-2021-25389

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: The issue is related to a page reclaim problem for a dead peer hairpin in the net/mlx5e module. The actual impact and potential for attack have not been proven yet. Recommendations: For Lin...

PT-2024-11253

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0+ Description The vulnerability is related to the net/mlx5e driver in the Linux kernel. When adding a hairpin flow, a firmware-side send queue is created for the peer net device, which claims some host memo...

PT-2024-11254 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.0-rc3+ Description: The vulnerability is a use-after-free issue in the mlx5e encap take function, which can be triggered by concurrent encap entry insertion/deletion. This can lead to a use-after-free error...

GSD-2021-1000599 net/mlx5e: Fix null deref accessing lag dev

net/mlx5e: Fix null deref accessing lag dev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

UVI-2021-1000554 net/mlx5e: Fix null deref accessing lag dev

net/mlx5e: Fix null deref accessing lag dev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

GSD-2021-1000554 net/mlx5e: Fix null deref accessing lag dev

net/mlx5e: Fix null deref accessing lag dev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

PT-2021-25025

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.12.8 Description: The issue is related to a null dereference when accessing a lag device in the net/mlx5e module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2024-11211 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null dereference vulnerability has been resolved in the Linux kernel, specifically in the net/mlx5e module. The issue occurs when the lag dev is null, and the code attempts to access...

kernel security, bug fix, and enhancement update

3.10.0-1160.15.2.OL7 - Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.3 3.10.0-1160.15.2 - fs nfs: Fix...

kernel security and bug fix update

4.18.0-193.28.12.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x6...

PT-2025-40744

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc4+ Description The Linux kernel contained a flaw in the net/mlx5e module where a race condition could occur during flow removal from the unready flows list. This happened because the check for the NOT REA...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-734) (Stack Clash)

The openSUSE Leap 42.2 kernel was updated to 4.4.73 to receive security and bugfixes. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped'...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to 4.4.73 to receive security and bugfixes. The following security bugs were fixed: - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped"...