RHEL 8 : kpatch-patch (RHSA-2022:0590)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0590 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

GSD-2022-1000225 RDMA/ucma: Protect mc during concurrent multicast leaves

RDMA/ucma: Protect mc during concurrent multicast leaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

GSD-2022-1000224 RDMA/cma: Use correct address when leaving multicast group

RDMA/cma: Use correct address when leaving multicast group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

PT-2022-28502

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue is related to RDMA/cma, where the correct address is not used when leaving a multicast group. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28503

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

Security update for the Linux Kernel (critical)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0363-1 Rating: critical References: 1154353 1154488 1160634 1176447 1177599 1183405 1185377 1187428 1187723 1188605 1191881 1193096 1193506 1193767 1193802 1193861 1193864 1193867 1194048 1194227...

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2022:0293-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0293-1 advisory. - A vulnerability was found in Linux Kernel where refcount leak in llcpsockbind causing use-after-free which might lead to privilege escalation...

SUSE SLES15: kernel-livepatch-5_3_18-59_13-default / etc (SUSE-SU-2022:0295-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0295-1 advisory. This update for the Linux Kernel 5.3.18-5913 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param...

PT-2022-7645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the nvme rdma error recovery work function. This vulnerability can be exploited due to a race condition, potentially affecting t...

SUSE SLES15: kernel-livepatch-5_3_18-59_24-default / etc (SUSE-SU-2022:0270-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0270-1 advisory. This update for the Linux Kernel 5.3.18-5924 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param...

CVE-2021-4218

A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters. Reading the counter sysctl panics the system. This flaw allows a local attacker with local access to cause a denial of service while the system reboots...

SUSE SLES15: kernel-livepatch-5_3_18-59_10-default / etc (SUSE-SU-2022:0257-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0257-1 advisory. This update for the Linux Kernel 5.3.18-5910 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param...

PT-2025-49697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s RDMA/siw implementation related to the destruction of Queue Pairs QPs. The issue occurs because QP destruction completion is not delayed until all siw...

GSD-2021-1002722 RDMA/irdma: Fix a user-after-free in add_pble_prm

RDMA/irdma: Fix a user-after-free in addpbleprm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

GSD-2021-1002720 RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow

RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

GSD-2021-1002719 RDMA: Fix use-after-free in rxe_queue_cleanup

RDMA: Fix use-after-free in rxequeuecleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

PT-2021-27187

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.9 Description A use-after-free issue was discovered in the RDMA component, specifically in the rxe queue cleanup function. The actual impact and attack plausibility of this issue have not yet been...

PT-2021-27190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.15.9 Description A user-after-free issue was discovered in the RDMA/irdma component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.14 and fixe...

PT-2021-27188

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.9 Description A potential security issue exists in the RDMA/mlx5 component, related to releasing unallocated memory in the dereg MR flow. The actual impact and attack plausibility have not yet been...

WS-2021-0538

RDMA: Fix use-after-free in rxequeuecleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...