UVI-2021-1001663 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...

GSD-2021-1001652 RDMA/cma: Do not change route.addr.src_addr.ss_family

RDMA/cma: Do not change route.addr.srcaddr.ssfamily This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

GSD-2021-1001651 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

UVI-2021-1001651 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

PT-2021-8187

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc4+ Description The vulnerability is related to the RDMA/mlx5 component of the Linux kernel, where the ODP xarray is not properly initialized when creating an ODP MR. This can cause a crash due to an erra...

PT-2021-26121

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.4 through v5.10.70 Description A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak can occur upon failure. The actual impact and attack...

PT-2021-26198

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue concerns the RDMA/cma component, specifically ensuring that rdma addr cancel occurs before more requests are issued. The actual impact and potential for attack have not been prove...

PT-2021-30193

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue concerns the RDMA/cma component, specifically the rdma addr cancel function. It is noted that this function should be executed before issuing more requests. The actual impact and...

PT-2021-30117

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30128

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to the nvme-rdma module, where a use-after-free condition can occur if the cm id is not properly destroyed before the qp. This could potentially lead to security...

PT-2021-30194

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30185

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.14.9 Description A potential security issue exists due to a kernel pointer leak in the RDMA/hfi1 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26215

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.14.9 Description: The issue is related to a potential use after free error in the nvme-rdma module. The problem arises when a CM ID is not properly destroyed before destroying a queue pair, which could lead to...

PT-2021-26199

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2021-26197

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak may occur upon failure. The actual impact and attack...

PT-2021-26122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30210

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.9 Description The issue is related to a potential use after free error in the nvme-rdma component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-30192

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.14.9 Description A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak can occur upon failure. The actual impact and attack...

PT-2021-30116

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.4 through v5.10.70 Description A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak can occur upon failure. The actual impact and likelihood ...

PT-2021-26133

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to the nvme-rdma module, where a use-after-free condition can occur if the cm id is not properly destroyed before the qp. This could potentially lead to security...