Critical: Red Hat Security Advisory: OpenShift Container Platform 4.16.74 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.74 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142485 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads W...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143124 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142765 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142481)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142481 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the...

K000163833: Linux kernel vulnerability CVE-2026-46114

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject non-8-byte ATOMICWRITE payloads atomicwritereply at drivers/infiniband/sw/rxe/rxeresp.c unconditionally dereferences 8 bytes at payloadaddrpkt: value = u64 payloadaddrpkt; checkrkey...

CVE-2026-93107

A flaw was found in the Linux kernel's RDMA/rxe component. When a Queue Pair QP transitions to an error state during packet completion, the system may reprocess an already-completed packet. This can lead to duplicate data being delivered to user applications, causing data stream corruption...

CVE-2026-90423

A flaw was found in the Linux kernel's RDMA/rxe component. An error in the On-Demand Paging ODP initialization path can lead to a Use-After-Free UAF vulnerability. During error handling, memory is prematurely released, but a pointer to it is not properly cleared. This allows subsequent operations...

CLSA-2025-1757961864 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Rejects unknown opcodes before processing by ICRC. Even after applying the patch 7244491dab34 “RDMA/rxe: Validates padding and ICRC before payloadsize in rxercv”, a single unauthenticated UDP packet can still trigger a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fixed the slab-use-after-free read issue in rxequeuecleanup. Call Trace: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x7d/0xa0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:378 inline...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: Fixed an issue in freerdatomicresources. The function freerdatomicresources uses qp-attr.maxdestrdatomic for iteration. Updating maxdestrdatomic before freeing the old array can cause the free process to traverse pas...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: A use-after-free issue was fixed in rxemmap. The rxemmap function removes an rxemmapinfo structure from the pendingmmaps list and releases the pendinglock while the kref of the structure is still set to 1: c...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix error unwind in rxecreateqp In the function rxecreateqp, rxeqpfrominit is called to initialize the qp; however, internal components such as spin locks are not set up until rxeqpinitreq is executed. If an error occur...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: The payloadsize function in rxercv requires the pad field and RXEICRCSIZE to be validated before being used. Currently, rxercv only checks that the incoming packet is at least headersizepkt bytes long before using...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validates numsge/cursge before indexing wqe-dma.sgecursge. For a user QP, qp-sq.queue represents a ring buffer. The application writes data directly into this buffer. As a result, rxepostsend ignores the isuser flag and...

SUSE CVE-2026-98360

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcgtree only after rxemcastadd succeeds rxegetmcg publishes a newly allocated multicast group in rxe-mcgtree before programming the backing Ethernet multicast address with rxemcastadd, which runs outside...

SUSE CVE-2026-98366

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxereregusermr reassigns mr-ibmr.pd first and only then validates the IBMRREREGACCESS argument: if flags & IBMRREREGPD rxeputoldpd; rxegetpd; mr-ibmr.pd = ibpd; if flags...

kernel: RDMA/rxe: Fix race condition in QP timer handlers

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA RXE component. A race condition exists between the retransmittimer and rxedestroyqp functions. This can cause a Queue Pair QP reference count to underflow, leading to a use-after-free vulnerability. A local attacker could...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...