CVE-2026-97421 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ibumemfindbestpgsz Several corner cases, especially important on 32 bits: - umem-iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the...

EUVD-2026-86026

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-97413

The Linux kernel is vulnerable to an integer underflow within the RDMA/rtrs-srv component, specifically in the process_read and process_write functions. The issue arises because usr_len is read from a network-supplied message field and used to compute data_len = off - usr_len without verifying th...

CVE-2026-97413 RDMA/rtrs-srv: Fix integer underflow in process_read and process_write

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-97413 RDMA/rtrs-srv: Fix integer underflow in process_read and process_write

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-93277

The Linux kernel contains a vulnerability in the RDMA/bnxt_re driver. The issue arises because destroy callbacks currently zero the udata output after tearing down driver resources; however, if userspace access fails, uverbs preserves the uobject , allowing the destroy callback to execute again e...

CVE-2026-93277 RDMA/bnxt_re: Validate udata before executing commands

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

CVE-2026-93277 RDMA/bnxt_re: Validate udata before executing commands

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

EUVD-2026-86149

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

CVE-2026-93267 RDMA/core: Fix potential use after free in uverbs_free_dmah()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

EUVD-2026-86139

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-93267 RDMA/core: Fix potential use after free in uverbs_free_dmah()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-93267

The Linux kernel contains a potential use-after-free vulnerability in the RDMA/core component, specifically within the uverbs_free_dmah() function. The root cause is that rdma_restrack_del() is invoked too late in the destruction flow, allowing a window where a dmah remains accessible through res...

CVE-2026-93264 RDMA/efa: Fix PBL chunk length computation

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix PBL chunk length computation On register MR, when creating the PBL, if it's an indirect PBL we create a chunk list to hold the PBL pages pointers. Each chunk is 4KB in size and can hold 510 addresses EFAPTRSPERCHUNK...

CVE-2026-93264

The Linux kernel contains a vulnerability in the RDMA/efa component related to PBL chunk length computation . When creating an indirect PBL during memory registration, the system incorrectly calculates the last chunk length as 0 if the number of pages is a multiple of EFA_PTRS_PER_CHUNK . This er...

CVE-2026-93264 RDMA/efa: Fix PBL chunk length computation

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix PBL chunk length computation On register MR, when creating the PBL, if it's an indirect PBL we create a chunk list to hold the PBL pages pointers. Each chunk is 4KB in size and can hold 510 addresses EFAPTRSPERCHUNK...

EUVD-2026-86136

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix PBL chunk length computation On register MR, when creating the PBL, if it's an indirect PBL we create a chunk list to hold the PBL pages pointers. Each chunk is 4KB in size and can hold 510 addresses EFAPTRSPERCHUNK...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

PT-2026-104940

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in process read and process write usr len is read from a network-supplied message field le16 to cpu and used to compute data len = off - usr len without validating that usr len off causing an...