UVI-2021-1002138 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

GSD-2021-1002138 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

PT-2021-26677

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.13 through 5.15 Description: The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-26608

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.13 through 5.14 Description The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to the initialization of the ODP xarray when creating an ODP MR in RDMA/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

Ubuntu: Security Advisory (USN-5137-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5137-2: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernels Userspace Connection Manager Access for RDMA. This could allow a local attacker to crash the system, corrupt memory or escalate privileges...

Ubuntu: Security Advisory (USN-5137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: RDMA/core: Prevent divide-by-zero error triggered by the user

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prevent divide-by-zero error triggered by the user The userentrysize is supplied by the user and later used as a denominator to calculate number of entries. The zero supplied by the user will trigger the following...

RDMA stack bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALBA-2021:4412 RDMA stack bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

RDMA stack bug fix and enhancement update

An update is available for mpitests, mvapich2, ucx, qperf, opensm, rpm-mpi-hooks, rdma-core, mstflint, libvma, openmpi, fabtests, perftest, libfabric, mpich. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

USN-5137-1: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

USN-5136-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

Unbreakable Enterprise kernel security update

4.1.12-124.57.1 - target; fix print statement warning John Donnelly Orabug: 33495661 - enic;: fix warning on moduleparam disablevlan0, John Donnelly Orabug: 33495661 - bnx2fc: correct BNX2FCTMTIMEOUT to be 60 sec John Donnelly Orabug: 33495661 - target: Fix linux-4.1.y specific compile warning...

UVI-2021-1001745 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

GSD-2021-1001745 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

UVI-2021-1001729 RDMA/cma: Do not change route.addr.src_addr.ss_family

RDMA/cma: Do not change route.addr.srcaddr.ssfamily This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...