Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-1262)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GSD-2023-1001422 RDMA/siw: Fix immediate work request flush to completion queue

RDMA/siw: Fix immediate work request flush to completion queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001419 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed

RDMA/rxe: Fix NULL-ptr-deref in rxeqpdocleanup when socket create failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001418 RDMA/hns: fix memory leak in hns_roce_alloc_mr()

RDMA/hns: fix memory leak in hnsroceallocmr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001113 RDMA/siw: Fix immediate work request flush to completion queue

RDMA/siw: Fix immediate work request flush to completion queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001111 RDMA/restrack: Release MR restrack when delete

RDMA/restrack: Release MR restrack when delete This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001110 RDMA/core: Make sure "ib_port" is valid when access sysfs node

RDMA/core: Make sure "ibport" is valid when access sysfs node This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001107 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed

RDMA/rxe: Fix NULL-ptr-deref in rxeqpdocleanup when socket create failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001106 RDMA/hns: fix memory leak in hns_roce_alloc_mr()

RDMA/hns: fix memory leak in hnsroceallocmr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000878 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

RDMA/mlx5: Fix mlx5ibgethwstats when used for device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000703 RDMA/siw: Fix immediate work request flush to completion queue

RDMA/siw: Fix immediate work request flush to completion queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000699 RDMA/core: Make sure "ib_port" is valid when access sysfs node

RDMA/core: Make sure "ibport" is valid when access sysfs node This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000697 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed

RDMA/rxe: Fix NULL-ptr-deref in rxeqpdocleanup when socket create failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000696 RDMA/rxe: Fix mr->map double free

RDMA/rxe: Fix mr-map double free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 6ce577f09013206e36e674cd27da3707b2278268, it...

GSD-2023-1000695 RDMA/hns: fix memory leak in hns_roce_alloc_mr()

RDMA/hns: fix memory leak in hnsroceallocmr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000409 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

RDMA/mlx5: Fix mlx5ibgethwstats when used for device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

PT-2023-33773 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential double free in the RDMA/rxe module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-33776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns the RDMA/core component of the Linux Kernel, where the ib port is not properly validated when accessing a sysfs node. The actual impact and attack plausibility have not ye...

PT-2023-33955 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the RDMA/mlx5 component, specifically with the mlx5 ib get hw stats function. It was introduced in version v4.16 and fixed in version v5.15.87. The actual impact and...

PT-2023-33774 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential issue exists in the RDMA/rxe component, specifically in the rxe qp do cleanup function, where a NULL pointer dereference can occur when socket creation fails. The actual impact a...