GSD-2023-1000695 RDMA/hns: fix memory leak in hns_roce_alloc_mr()

RDMA/hns: fix memory leak in hnsroceallocmr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000409 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

RDMA/mlx5: Fix mlx5ibgethwstats when used for device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

PT-2023-34499

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns an immediate work request flush to completion queue in RDMA/siw. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-33486 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the RDMA/mlx5 component, specifically with the mlx5 ib get hw stats function. It is noted that the actual impact and attack plausibility have not yet been proven. The...

PT-2023-33780 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns an immediate work request flush to completion queue in RDMA/siw. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33955 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the RDMA/mlx5 component, specifically with the mlx5 ib get hw stats function. It was introduced in version v4.16 and fixed in version v5.15.87. The actual impact and...

PT-2023-33776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns the RDMA/core component of the Linux Kernel, where the ib port is not properly validated when accessing a sysfs node. The actual impact and attack plausibility have not ye...

PT-2023-33774 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential issue exists in the RDMA/rxe component, specifically in the rxe qp do cleanup function, where a NULL pointer dereference can occur when socket creation fails. The actual impact a...

PT-2023-34188

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15.85 Description The issue concerns the RDMA/restrack component. It involves releasing MR restrack when deleted. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2023-33778

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v6.0.15 Description The issue concerns the RDMA/restrack component. It involves releasing MR restrack when delete is performed. The actual impact and attack plausibility of this issue have not yet been prove...

PT-2023-34184

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A potential issue exists in the RDMA/rxe component, specifically in the rxe qp do cleanup function, where a NULL pointer dereference can occur when socket creation fails. The actual impact an...

PT-2023-33773 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential double free in the RDMA/rxe module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-34190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.15.85 Description The issue is related to the RDMA/siw component, specifically concerning the handling of immediate work request flush to completion queue. The actual impact and attack plausibility have no...

PT-2023-34496

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential issue exists in the RDMA/rxe component, specifically in the rxe qp do cleanup function, where a NULL pointer dereference can occur when socket creation fails. The actual impact a...

kernel security and bug fix update

4.18.0-425.10.1.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2023-1223)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.520.3.1.el7 - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34883027 CVE-2022-4378 - proc: avoid integer type confusion in getproclong Linus Torvalds Orabug: 34883027 CVE-2022-4378 - hugetlbfs: don't delete error page from pagecache James...

Unbreakable Enterprise kernel security update

5.4.17-2136.314.6.2 - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34883034 CVE-2022-4378 - proc: avoid integer type confusion in getproclong Linus Torvalds Orabug: 34883034 CVE-2022-4378 5.4.17-2136.314.6.1 - RDMA/uverbs: Move IBEVENTDEVICEFATAL to...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.314.6.2.el7 - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34883034 CVE-2022-4378 - proc: avoid integer type confusion in getproclong Linus Torvalds Orabug: 34883034 CVE-2022-4378 5.4.17-2136.314.6.1.el7 - RDMA/uverbs: Move IBEVENTDEVICEFATAL ...

GSD-2022-1008200 RDMA/core: Fix null-ptr-deref in ib_core_cleanup()

RDMA/core: Fix null-ptr-deref in ibcorecleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.224 by commit...