GSD-2022-1001205 RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001203 Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error"

Revert "RDMA/core: Fix ibqpusecntdec called when error" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001197 RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()

RDMA/nldev: Prevent underflow in nldevstatsetcounterdynamicdoit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30353

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and potential for attack have not been fully...

PT-2022-30243

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A use-after-free bug was discovered in the RDMA/hfi1 component of the Linux Kernel. The issue was introduced in version v5.10 and is fixed in version v5.10.111. The actual impact and attack...

PT-2022-30111

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.15.32 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and potential for attack have not been proven yet...

PT-2022-29620

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.16.19 Description A use-after-free bug was discovered in the RDMA/hfi1 component of the Linux Kernel. The issue was introduced in version v5.10 and is fixed in version v5.16.20. The actual impact and atta...

PT-2022-29797

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to preventing some integer underflows in RDMA/irdma. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-29948

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15.33 Description A use-after-free bug was discovered in the RDMA/hfi1 component of the Linux Kernel. The issue was introduced in version v5.10 and is fixed in version v5.15.34. The actual impact and atta...

PT-2022-29478

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.17.1 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and potential for attack have not been fully...

PT-2022-29468

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue has been identified in the RDMA/rxe component, where a variable and function argument were not of the proper type. The actual impact and attack plausibility of this...

PT-2022-29480

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to preventing some integer underflows in RDMA/irdma. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29787

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.19 Description A potential security issue has been identified in the RDMA/rxe component, where a variable and function argument were not of the proper type. The actual impact and attack plausibility of this...

PT-2022-30515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and potential for attack have not been fully determine...

PT-2022-30110

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to preventing some integer underflows in RDMA/irdma. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-29794

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A memory leak issue exists in the RDMA/mlx5 component, specifically in the error flow for the subscribe event routine. The actual impact and attack plausibility of this issue have not yet bee...

PT-2022-29276

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.17.2 Description A use-after-free bug was discovered in the RDMA/hfi1 component of the Linux Kernel. The issue was introduced in version v5.10 and is fixed in version v5.17.3. The actual impact and attack...

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2022:1266-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1266-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-28356: Fixed a refcount bug...

SUSE SLES12 Security Update : kernel (SUSE-SU-2022:1267-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1267-1 advisory. - Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel CVE-2021-39713 - In the Linux kernel...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2022:1256-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1256-1 advisory. The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security...