UVI-2021-1001728 RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests

RDMA/cma: Ensure rdmaaddrcancel happens before issuing more requests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001728 RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests

RDMA/cma: Ensure rdmaaddrcancel happens before issuing more requests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

UVI-2021-1001727 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001727 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

UVI-2021-1001720 RDMA/hfi1: Fix kernel pointer leak

RDMA/hfi1: Fix kernel pointer leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit 714bfabe5f2901d96902e271d7217601fe4703e5, ...

GSD-2021-1001720 RDMA/hfi1: Fix kernel pointer leak

RDMA/hfi1: Fix kernel pointer leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit 714bfabe5f2901d96902e271d7217601fe4703e5, ...

UVI-2021-1001663 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...

GSD-2021-1001663 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...

GSD-2021-1001652 RDMA/cma: Do not change route.addr.src_addr.ss_family

RDMA/cma: Do not change route.addr.srcaddr.ssfamily This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

UVI-2021-1001651 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

GSD-2021-1001651 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

PT-2021-8187

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc4+ Description The vulnerability is related to the RDMA/mlx5 component of the Linux kernel, where the ODP xarray is not properly initialized when creating an ODP MR. This can cause a crash due to an erra...

PT-2021-26121

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.4 through v5.10.70 Description A potential issue exists in the RDMA/cma component, specifically in the rdma cma listen on all function, where a listener leak can occur upon failure. The actual impact and attack...

PT-2021-26215

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.14.9 Description: The issue is related to a potential use after free error in the nvme-rdma module. The problem arises when a CM ID is not properly destroyed before destroying a queue pair, which could lead to...

PT-2021-26198

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue concerns the RDMA/cma component, specifically ensuring that rdma addr cancel occurs before more requests are issued. The actual impact and potential for attack have not been prove...

PT-2021-26122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30193

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue concerns the RDMA/cma component, specifically the rdma addr cancel function. It is noted that this function should be executed before issuing more requests. The actual impact and...

PT-2021-30117

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30128

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to the nvme-rdma module, where a use-after-free condition can occur if the cm id is not properly destroyed before the qp. This could potentially lead to security...

PT-2021-30194

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue is related to RDMA/cma, where the route.addr.src addr.ss family is not changed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...