CVE-2026-99212

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A local attacker could exploit this flaw to cause a Denial of Service DoS or memory corruption via a use-after-free condition. When route resolution fails during Remote Direct Memory Access RDMA connection...

CVE-2026-93224

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to improper error handling during connection cleanup in the Remote Direct Memory Access RDMA server subsystem. When a connection accept operation fails before registration completes, the kernel...

CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

K000164033: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46142 In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register...

DEBIAN-CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

CVE-2026-118375 llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

CVE-2026-118375

The llama.cpp project (versions b8841 before b11865 ) is vulnerable to a stack-based buffer overflow in the ggml-rpc RDMA transport rdma_recv() function. This out-of-bounds write allows unauthenticated peers to overflow the rpc-server stack by sending up to 256 KiB into a 1-byte stack variable wi...

CVE-2026-118375 llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

EUVD-2026-111551

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...

PT-2026-127741

Name of the Vulnerable Software and Affected Versions llama.cpp versions b8841 through b11864 Description An out-of-bounds write exists in the ggml-rpc RDMA transport rdma recv function. Unauthenticated peers can overflow the rpc-server stack by advertising RDMA capabilities in the HELLO message,...

Linux Distros Unpatched Vulnerability : CVE-2026-118375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers t...

PT-2026-128205

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma cm destroy an id RDS still owns on route failure rds rdma cm event handler cmn hands the return value of rdma resolve route straight back to the rdma cm on RDMA CM EVENT ADDR RESOLVED. A synchronous...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.16.74 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.74 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146257 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as 1...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146344)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146344 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: zero shared page before exposing to userspace bnxtreallocucontext allocates uctx-sh...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146345 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HWprovided UAR index rather than the SW one Free the UAR index returned by...

CLSA-2026-1792759740 kernel: Fix of 134 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 - net: skbuff: propagate...

CLSA-2026-1792752282 kernel: Fix of 90 CVEs

can: esdusb: kill anchored URBs before freeing netdevs CVE-2026-64585 - ext4: fix kernel BUG in ext4writeinlinedataend CVE-2026-74308 - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop CVE-2026-72348 - xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst...

CLSA-2026-1792751773 kernel: Fix of 88 CVEs

can: esdusb: kill anchored URBs before freeing netdevs CVE-2026-64585 - ext4: fix kernel BUG in ext4writeinlinedataend CVE-2026-74308 - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop CVE-2026-72348 - xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst...