CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

CVE-2021-3582

CVE-2021-3582 is described in connected Astra Linux advisories as a flaw in the QEMU implementation of VMware’s paravirtual RDMA (pvrdma) device. The issue occurs while handling the PVRDMA_CMD_CREATE_MR command due to improper memory remapping (mremap). This can allow a malicious guest to crash t...

CVE-2021-3582: Improper Restriction of Operations within the Bounds of a Memory Buffer

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

USN-5343-1: Linux kernel vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 It was discovered that the aufs file system in the Linux...

GSD-2022-1000949 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.304 by commit 8cc342508f9e7fdccd2e9758ae9d52aff72dab7f, it was...

GSD-2022-1000930 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.269 by commit 4752fafb461821f8c8581090c923ababba68c5bd, it was...

GSD-2022-1000910 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.232 by commit d7997d19dfa7001ca41e971cd9efd091bb195b51, it was...

GSD-2022-1000885 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit 901206f71e6ad2b2e7accefc5199a438d173c25f, it was...

GSD-2022-1000854 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit 99eb8d694174c777558dc902d575d1997d5ca650, it was...

GSD-2022-1000848 RDMA/cma: Do not change route.addr.src_addr outside state checks

RDMA/cma: Do not change route.addr.srcaddr outside state checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000801 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit c8b56e51aa91b8e7df3a98388dce3fdabd15c1d4, it was...

GSD-2022-1000794 RDMA/cma: Do not change route.addr.src_addr outside state checks

RDMA/cma: Do not change route.addr.srcaddr outside state checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

GSD-2022-1000734 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit 98d056603ce55ceb90631b3927151c190dfb1b27, it was...

GSD-2022-1000726 RDMA/cma: Do not change route.addr.src_addr outside state checks

RDMA/cma: Do not change route.addr.srcaddr outside state checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

PT-2022-29068

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue is related to RDMA/cma, where the route.addr.src addr is changed outside state checks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.8 through v5.15.25 Description A potential issue has been identified in the RDMA/ib srp component of the Linux Kernel, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven...

PT-2022-29122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue is related to the RDMA/cma component, where the route.addr.src addr is modified outside of state checks. The actual impact and potential for attack have not been proven yet...

PT-2022-29128

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.8 through 5.10.102 Description A potential security issue exists due to a deadlock in RDMA/ib srp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.8 throug...

PT-2022-29159

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A potential security issue exists due to a deadlock in RDMA/ib srp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...