PT-2021-27190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.15.9 Description A user-after-free issue was discovered in the RDMA/irdma component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.14 and fixe...

CVE-2021-4028

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this...

UVI-2021-1002322 RDMA/core: Set send and receive CQ before forwarding to the driver

RDMA/core: Set send and receive CQ before forwarding to the driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002322 RDMA/core: Set send and receive CQ before forwarding to the driver

RDMA/core: Set send and receive CQ before forwarding to the driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

PT-2021-30787

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.4 Description The issue is related to the RDMA/core component, where send and receive CQ are not set before forwarding to the driver. The actual impact and attack plausibility have not yet been proven...

PT-2021-26792

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to the RDMA/core component, where send and receive CQ are not set before forwarding to the driver. The actual impact and attack plausibility have not yet been proven...

kernel security and bug fix update

3.10.0-1160.49.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernels Userspace Connection Manager Access for RDMA. This could allow a local attacker to crash the system, corrupt memory or escalate privileges...

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernels Userspace Connection Manager Access for RDMA. This could allow a local attacker to crash the system, corrupt memory or escalate privileges...

GSD-2021-1002207 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002207 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002138 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

GSD-2021-1002138 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

PT-2021-26677

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.13 through 5.15 Description: The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-26608

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.13 through 5.14 Description The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

Ubuntu: Security Advisory (USN-5137-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5137-2: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernels Userspace Connection Manager Access for RDMA. This could allow a local attacker to crash the system, corrupt memory or escalate privileges...