PT-2026-94947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the nvmet-rdma module when an NVMe target using RDMA transport is removed while I/O operations are in flight. In this scenario, a response may be posted, but th...

CVE-2026-90218: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix WARNING in restort syzbot reported a WARNON!res-dev in restort triggered via addrhandler during asynchronous address resolution: " WARNING: drivers/infiniband/core/restrack.c:138 at restort+0x1c4/0x230 CPU1:...

PT-2026-94640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/siw component within the siw accept function. The function looks up a Queue Pair QP provided by userspace; if the QP is already in Ready to Send...

ALSA-2026:68570 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow CVE-2026-23172 kernel: xfrm: hold dev ref until after transportfinish NFHOOK CVE-2026-31663 kernel: RDMA/rxe: Fix race...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500329)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500329 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035523 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft As...

PT-2026-94904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/ipoib component where the system fails to drain RCU Read-Copy-Update callbacks during module teardown. IPoIB reclamation completions may be signaled from with...

PT-2026-94657

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/erdma component where EQ handlers look up CQs from dev-cq xa and invoke completion or error callbacks outside the xarray lock. This allows erdma destroy cq to...

PT-2026-94818

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA core component. When accessing a Shared Receive Queue SRQ via the netlink path, the synchronization relies on rdma restrack get. Because rdma...

PT-2026-94905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA mlx5 component where the devx free subscription function can remain queued after the last DevX event file drops its module reference or an auxiliary driver...

PT-2026-94903

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rxe component where the responder state machine may reprocess a packet after the Queue Pair QP enters an error state. This occurs when do complete returns...

CVE-2026-90171: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: release pending child sockets outside the handler lock smbdirectsocketdestroy releases the listener's pending/ready child sockets while still holding the listener's handler lock, the &idpriv-handlermutex taken via...

PT-2026-94567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/cxgb4 component where the per-device debugfs tree, created by c4iw alloc via setup debugfs, is not properly removed during registration failure. Specifically,...

PT-2026-94763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/cxgb4 driver where the write tpt entry function fails to release a STAG index when write adapter mem returns an error. The function allocates a new STAG index...

PT-2026-94771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the RDMA/rxe component. The function rxe odp mr init user assigns a memory reference to mr-umem before calling rxe odp init pages. If rxe odp init...

PT-2026-94820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA core component. When querying a Queue Pair QP via the netlink flow, the synchronization relies on rdma restrack get. However, during the QP...

PT-2026-94819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA core component. When accessing a Completion Queue CQ via the netlink path, the synchronization relies on rdma restrack get. Because rdma restrac...

RHEL 9 : kernel (RHSA-2026:68570)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68570 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel t7xx WWAN driver...

PT-2026-94764

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds read exists in the RDMA/mlx5 cc params debugfs. The get param function reads a congestion parameter as a u32 but formats it using a signed %d into an 11-byte stack...

PT-2026-94783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the RDMA/mlx5 component when the set user buf size function calculates the Queue Pair QP buffer size. The function performs a left-shift operation on...

PT-2026-94803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the RDMA bnxt re component, the bnxt re mmap function rejects VM WRITE flags for DBR PAGE and TOGGLE PAGE memory mappings. However, a read-only mapping may still retain the VM MAYWRIT...