Lucene search
+L

166 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.5 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098793)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098793 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq-rq.queue after resize failure A NULL pointer dereference can occu...

7.8CVSS6.3AI score0.00141EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fixed an error in the unwind operation of rxecreateqp. In the function rxecreateqp, the rxeqpfrominit function is called to initialize the qp. Internally, things like the spin locks are not set up until rxeqpinitreq is...

5.5CVSS6AI score0.00166EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.4 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fixed the slab-use-after-free read issue in rxequeuecleanup. Call Trace: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x7d/0xa0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:378 inline...

7.8CVSS6.3AI score0.00185EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/15 6:22 a.m.6 views

CVE-2026-74377

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...

7.8CVSS0.00129EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/15 6:22 a.m.5 views

CVE-2026-74378

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

7.8CVSS0.00143EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/15 6:22 a.m.7 views

UBUNTU-CVE-2026-74377

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/15 6:22 a.m.8 views

UBUNTU-CVE-2026-74378

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

7.8CVSS5.7AI score0.00143EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/08/15 6:22 a.m.11 views

CVE-2026-74377

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/08/15 6:22 a.m.9 views

CVE-2026-74378

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

7.8CVSS5.8AI score0.00143EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/15 5:58 a.m.41 views

CVE-2026-74378

CVE-2026-74378 affects the Linux kernel RDMA/rxe path: get_srq_wqe() reads wqe->dma.num_sge from a shared userspace-mapped buffer. The issue is a TOCTOU heap overflow caused by validating num_sge against max_sge and then re-reading the same field to compute memcpy size, allowing a concurrent u...

7.8CVSS5.7AI score0.00143EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/15 5:58 a.m.9 views

EUVD-2026-59525

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

5.8AI score0.00143EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/15 5:58 a.m.21 views

CVE-2026-74378 RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validates numsge against maxsge, but then re-reads the same field to calculat...

7.8CVSS5.9AI score
SaveExploits0References9
EUVD
EUVD
added 2026/08/15 5:58 a.m.7 views

EUVD-2026-59524

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...

5.7AI score0.00129EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/15 5:58 a.m.13 views

CVE-2026-74377 RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...

7.8CVSS5.8AI score
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/15 5:58 a.m.33 views

CVE-2026-74377 RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...

7.8CVSS0.00129EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/15 5:58 a.m.43 views

CVE-2026-74377

CVE-2026-74377 affects Linux kernel RDMA/rxe in non-SRQ receive path. The issue arises when the responder reads WQE fields directly from a userspace-mapped shared queue, allowing a malicious user to modify fields such as num_sge or sge entries while the kernel processes the WQE, leading to out-of...

7.8CVSS5.6AI score0.00129EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.9 views

PT-2026-72814

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get srq wqe get srq wqe reads wqe-dma.num sge from the shared receive queue buffer, which is mapped into userspace. It validates num sge against max sge, but then re-reads the same field to...

5.7AI score0.00143EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.18 views

PT-2026-72813

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like num sge or...

5.6AI score0.00129EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/15 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-74378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validate...

7.8CVSS6.1AI score0.00143EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/15 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-74377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into...

7.8CVSS6AI score0.00129EPSS
SaveExploits0References4
Rows per page
Query Builder