GSD-2021-1002719 RDMA: Fix use-after-free in rxe_queue_cleanup

RDMA: Fix use-after-free in rxequeuecleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

PT-2021-27190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.15.9 Description A user-after-free issue was discovered in the RDMA/irdma component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.14 and fixe...

WS-2021-0538

RDMA: Fix use-after-free in rxequeuecleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

WS-2021-0537

RDMA/irdma: Fix a user-after-free in addpbleprm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

PT-2021-27187

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.9 Description A use-after-free issue was discovered in the RDMA component, specifically in the rxe queue cleanup function. The actual impact and attack plausibility of this issue have not yet been...

PT-2021-27188

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.9 Description A potential security issue exists in the RDMA/mlx5 component, related to releasing unallocated memory in the dereg MR flow. The actual impact and attack plausibility have not yet been...

CVE-2021-4028

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this...

UVI-2021-1002322 RDMA/core: Set send and receive CQ before forwarding to the driver

RDMA/core: Set send and receive CQ before forwarding to the driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002322 RDMA/core: Set send and receive CQ before forwarding to the driver

RDMA/core: Set send and receive CQ before forwarding to the driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

PT-2021-26792

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to the RDMA/core component, where send and receive CQ are not set before forwarding to the driver. The actual impact and attack plausibility have not yet been proven...

PT-2021-30787

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.4 Description The issue is related to the RDMA/core component, where send and receive CQ are not set before forwarding to the driver. The actual impact and attack plausibility have not yet been proven...

kernel security and bug fix update

3.10.0-1160.49.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernels Userspace Connection Manager Access for RDMA. This could allow a local attacker to crash the system, corrupt memory or escalate privileges...

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernels Userspace Connection Manager Access for RDMA. This could allow a local attacker to crash the system, corrupt memory or escalate privileges...

UVI-2021-1002207 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002207 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002138 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

GSD-2021-1002138 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

PT-2021-26677

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.13 through 5.15 Description: The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-26608

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...