3 matches found
CVE-2026-53371
The CVE-2026-53371 entry describes a Linux kernel vulnerability in RDMA/ionic where node_desc[64] in struct ib_device may not be NUL-terminated after a memcpy of up to IB_DEVICE_NODE_DESC_MAX bytes. The ionic hca_type_show() uses an unbounded %s, which can read past node_desc into adjacent fields...
CVE-2026-53371
In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound nodedesc sysfs read with %.64s nodedesc64 in struct ibdevice is not guaranteed to be NUL- terminated. The core IB sysfs handler uses "%.64s" for exactly this reason drivers/infiniband/core/sysfs.c:1307, since...
EUVD-2026-45441
In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound nodedesc sysfs read with %.64s nodedesc64 in struct ibdevice is not guaranteed to be NUL- terminated. The core IB sysfs handler uses "%.64s" for exactly this reason drivers/infiniband/core/sysfs.c:1307, since...