GSD-2021-1000315 nvmet-rdma: Fix NULL deref when SEND is completed with error

nvmet-rdma: Fix NULL deref when SEND is completed with error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

GSD-2021-1000423 RDMA/qedr: Fix error return code in qedr_iw_connect()

RDMA/qedr: Fix error return code in qedriwconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000227 RDMA/siw: Fix a use after free in siw_alloc_mr

RDMA/siw: Fix a use after free in siwallocmr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000248 RDMA/rtrs-clt: destroy sysfs after removing session from active list

RDMA/rtrs-clt: destroy sysfs after removing session from active list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000342 RDMA/siw: Fix a use after free in siw_alloc_mr

RDMA/siw: Fix a use after free in siwallocmr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000359 RDMA/rtrs-clt: destroy sysfs after removing session from active list

RDMA/rtrs-clt: destroy sysfs after removing session from active list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000249 RDMA/qedr: Fix error return code in qedr_iw_connect()

RDMA/qedr: Fix error return code in qedriwconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000423 RDMA/qedr: Fix error return code in qedr_iw_connect()

RDMA/qedr: Fix error return code in qedriwconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

GSD-2021-1000196 nvmet-rdma: Fix NULL deref when SEND is completed with error

nvmet-rdma: Fix NULL deref when SEND is completed with error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000248 RDMA/rtrs-clt: destroy sysfs after removing session from active list

RDMA/rtrs-clt: destroy sysfs after removing session from active list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000418 RDMA/siw: Fix a use after free in siw_alloc_mr

RDMA/siw: Fix a use after free in siwallocmr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

PT-2021-28661

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.9 through v5.12.4 Description A potential security issue exists due to a NULL dereference when a SEND operation is completed with an error in nvmet-rdma. The actual impact and likelihood of an attack have not been...

PT-2021-28966

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.12.6 Description The issue is related to the RDMA/rxe component, where certain fields are not properly cleared if the creation of a QP fails. This could potentially lead to security vulnerabilities, although...

PT-2021-24991

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.270 Description: The issue is related to the RDMA/rxe component, where certain fields are not properly cleared if the creation of a QP Queue Pair fails. This could potentially lead to security issues,...

PT-2021-28823

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to the RDMA/qedr component, specifically in the qedr iw connect function. It involves an error return code fix. The actual impact and potential for attack have not been...

PT-2021-24990

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.234 Description: The issue concerns the RDMA/rxe component, where if the creation of a QP Queue Pair fails, not all fields are properly cleared. This is an automated ID intended to aid in the discovery of...

PT-2021-28824

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description A potential security issue exists in the RDMA/rtrs-clt component, related to the destruction of sysfs after removing a session from the active list. The actual impact and attack plausibility...

PT-2021-24987

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.122 Description: The issue is related to the RDMA/rxe component, where certain fields are not properly cleared if the creation of a QP Queue Pair fails. This could potentially lead to security...

PT-2021-24829

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to the RDMA/qedr component, specifically in the qedr iw connect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-24830

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: A potential issue exists in the RDMA/rtrs-clt component, where the sysfs is not properly destroyed after removing a session from the active list. The actual impact and attack plausibility...