PT-2022-29184

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.8 through v4.19.231 Description A potential issue has been identified in the RDMA/ib srp component of the Linux Kernel, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven...

PT-2022-29223

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A potential issue has been identified in the RDMA/ib srp component, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29000

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description The issue is related to RDMA/cma, where the route.addr.src addr is changed outside state checks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2025-8127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the RDMA/nldev component. The issue arises from the function nldev stat set counter dynamic doit, where the...

PT-2022-29008

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.8 through v5.16.11 Description A potential security issue exists due to a deadlock in RDMA/ib srp. The actual impact and attack plausibility have not yet been proven. The issue was introduced in version v3.8 and is fix...

PT-2022-29122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue is related to the RDMA/cma component, where the route.addr.src addr is modified outside of state checks. The actual impact and potential for attack have not been proven yet...

PT-2022-29204

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.8 through v4.14.268 Description A potential security issue exists due to a deadlock in RDMA/ib srp. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.8 and is...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-147_58_1 security and bug fix update

An update for kpatch-patch-4180-147581 is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

RHEL 8 : kpatch-patch (RHSA-2022:0851)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0851 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

kernel security, bug fix, and enhancement update

4.18.0-348.20.15.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel: use-after-free in RDMA listen()

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this...

ALSA-2022:0825 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel 4.18.0. BZ2036888 Security Fixes: kernel: improper initialization of the "flags" member of the new pipebuffer CVE-2022-0847 kernel: U...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0760-1 Rating: important References: 1089644 1154353 1157038 1157923 1176447 1176940 1178134 1181147 1181588 1183872 1187716 1188404 1189126 1190812 1190972 1191580 1191655 1191741 1192210 1192483...

RHEL 8 : kpatch-patch (RHSA-2022:0772)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0772 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

kernel: use-after-free in RDMA listen()

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory resulting in a denial of service. The highest threat from this vulnerability is to system availability.

...

CVE-2022-0812

An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpcrdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information...

GSD-2022-1000668 RDMA/siw: Fix refcounting leak in siw_create_qp()

RDMA/siw: Fix refcounting leak in siwcreateqp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...