GSD-2022-1000801 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit c8b56e51aa91b8e7df3a98388dce3fdabd15c1d4, it was...

GSD-2022-1000794 RDMA/cma: Do not change route.addr.src_addr outside state checks

RDMA/cma: Do not change route.addr.srcaddr outside state checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

GSD-2022-1000734 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit 98d056603ce55ceb90631b3927151c190dfb1b27, it was...

GSD-2022-1000726 RDMA/cma: Do not change route.addr.src_addr outside state checks

RDMA/cma: Do not change route.addr.srcaddr outside state checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

PT-2022-29075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.8 through v5.15.25 Description A potential issue has been identified in the RDMA/ib srp component of the Linux Kernel, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven...

PT-2022-29159

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A potential security issue exists due to a deadlock in RDMA/ib srp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29008

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.8 through v5.16.11 Description A potential security issue exists due to a deadlock in RDMA/ib srp. The actual impact and attack plausibility have not yet been proven. The issue was introduced in version v3.8 and is fix...

PT-2022-29184

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.8 through v4.19.231 Description A potential issue has been identified in the RDMA/ib srp component of the Linux Kernel, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven...

PT-2022-29223

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A potential issue has been identified in the RDMA/ib srp component, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29000

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description The issue is related to RDMA/cma, where the route.addr.src addr is changed outside state checks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2025-8127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the RDMA/nldev component. The issue arises from the function nldev stat set counter dynamic doit, where the...

PT-2022-29122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue is related to the RDMA/cma component, where the route.addr.src addr is modified outside of state checks. The actual impact and potential for attack have not been proven yet...

PT-2022-29204

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.8 through v4.14.268 Description A potential security issue exists due to a deadlock in RDMA/ib srp. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.8 and is...

PT-2022-29128

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.8 through 5.10.102 Description A potential security issue exists due to a deadlock in RDMA/ib srp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.8 throug...

PT-2022-29068

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue is related to RDMA/cma, where the route.addr.src addr is changed outside state checks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-147_58_1 security and bug fix update

An update for kpatch-patch-4180-147581 is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

RHEL 8 : kpatch-patch (RHSA-2022:0851)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0851 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

kernel security, bug fix, and enhancement update

4.18.0-348.20.15.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel: use-after-free in RDMA listen()

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this...

ALSA-2022:0825 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel 4.18.0. BZ2036888 Security Fixes: kernel: improper initialization of the "flags" member of the new pipebuffer CVE-2022-0847 kernel: U...