Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: A low-value MPA length field was rejected during signed receive math calculations. A malicious connected SIW peer can send an iWARP FPDU whose MPA length field chdr-mpalen, 16-bit big-endian, peer-controlled is smaller...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/srpt: Do not register the event handler until the srpt device is fully set up. In rare cases, KASAN reports a use-after-free error in the srptrefreshport function. This appears to occur because the event handler is...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: The MR restrack must be released when it is deleted. The MR restrack also needs to be released when it is deleted; otherwise, a memory leak may occur, as the task struct will not be released...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed an issue where free was called after the memory was allocated. Our code analyzer reported a Use-after-Free UAF vulnerability. In the function siwallocmr, it calls siwmraddmemmr,.... In the implementation of...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fixed a reference leak in the GID entry when the createah operation fails. If the AH create request fails, the sgidattr should be released to avoid a reference leak during the release of the GID table...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/qedr: Fixed the qedrcreateuserqp error flow. Avoid the following warning by ensuring that allocated resources are freed in case qedrinituserqueue fails. ----------- Cut here --- WARNING: CPU: 0 PID: 143192 at...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative datalen in ibumadwrite ibumadwrite calculates datalen based on a user-controlled count and the MAD header sizes. When the user-defined MAD header size does not match the RMPP header length, datalen can...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd-result only when scmnd is not NULL. This change fixes the following kernel NULL pointer dereference, which is occasionally reproduced by blktests srp/007. Bug: Kernel NULL pointer dereference, address:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fixed a use-after-free in the cleanup process for path file creation. In the error path of rtrssrvcreatepathfiles, the sysfs root folders may have already been created, and svrpath-kobj may already have been initialize...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fixed truncation for block sizes greater than or equal to 4GB. When the iommu is used, the linearization of the mapping may result in a single block being split across multiple SG entries. When rdmablockiternext...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Rejects unknown opcodes before processing by ICRC. Even after applying commit 7244491dab34 “RDMA/rxe: Validates padding and ICRC before payloadsize in rxercv”, a single unauthenticated UDP packet can still trigger a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32-bit systems. The “gl-totlen” variable is controlled by the user. It originates from processresponses. On 32-bit systems, the expression “gl-totlen + sizeofstruct cplpassacceptr...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fixed the issue where a call to hnsroceqpremove was not locked. Sashiko points out that hnsroceqpremove requires the caller to hold certain locks. The error handling mechanism in hnsrocecreateqpcommon does not ensure th...

kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA bnxtre driver. A local user could exploit a race condition that occurs when a Queue Pair QP is destroyed, but completion queue CQ polling continues. This can lead to a kernel panic, resulting in a Denial of Service DoS on the...

kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the ibuverbspostsend function. A local user can exploit this vulnerability by providing an invalid work queue element size wqesize from userspace without proper validation. This can lead to an...

ALSA-2026:75747 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock CVE-2025-40242 kernel: Linux kernel: Denial of...

Oracle Linux 8 : kernel (ELSA-2026-74133)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74133 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257757 CVE-2026-72099 - net/liquidio: drop cached VF pcidev LUT Izabela Bakolla...

Oracle Linux 9 : kernel (ELSA-2026-74438)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74438 advisory. - futex: Prevent rcuwait use-after-free during requeue PI Waiman Long RHEL-263481 CVE-2026-90003 - futex: Fix race on the initial mm-futex.phash.ref...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_74438)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202674438 advisory. kernel: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend CVE-2026-45856 kernel: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT pa...

RLSA-2026:74438 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend CVE-2026-45856 kernel: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT path CVE-2026-63794 kernel: futex: Fix race...