Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102092 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4srqevent Sashiko points out the radixtree itself is RCU safe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102050 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/vmwpvrdma: Fix double free on pvrdmaallocucontext error path Sashiko points out that...

CVE-2026-74378

A flaw was found in the Linux kernel's RDMA/rxe component. A Time-of-check to time-of-use TOCTOU vulnerability exists where a user-space thread can modify the numsge value after it has been validated but before it is used to calculate a memory copy size. This allows a local attacker to trigger a...

CVE-2026-74299

A flaw was found in the Linux kernel's RDMA/core component. When aging pools with pinned handles, a failure to move handles from the active queue to an inactive queue during new page allocation can lead to a memory leak. This occurs because the system does not properly handle the fault, resulting...

CVE-2026-74298

A flaw was found in the RDMA/core component of the Linux kernel. This vulnerability occurs when the push to the pool fails, leading to a failure in the destruction of FRMR Fast Registration Memory Region handles. This can result in a resource leak, potentially impacting system stability or...

CVE-2026-74297

A flaw was found in the Linux kernel's RDMA/mlx5 subsystem. Insufficient validation of a user-provided input, rqwqeshift, in the setrqsize function can lead to an integer overflow. This overflow results in an undefined shift operation, which may cause system instability or a denial of service...

CVE-2026-74296

A flaw was found in the RDMA/mlx5 component of the Linux kernel. This vulnerability occurs due to an incorrect User Access Register UAR index release, where the software-provided index is freed instead of the hardware-provided one. This improper resource management could potentially lead to...

OESA-2026-3452 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLANULSTRING These attributes are evaluated as c-string passed to strcmp, but NLASTRING doesn't check for the presence of a \0 terminator. Eith...

CVE-2026-72500

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Broadcom NetXtreme-E bnxtre driver. This use-after-free vulnerability occurs because a specific memory page is released prematurely during the teardown process. A local attacker could exploit this timing issue, potentially...

CVE-2026-72497

A flaw was found in the RDMA/bnxtre component of the Linux kernel. This vulnerability arises from insufficient validation of the Work Queue Entry WQE mode, which dictates how tasks are managed, against the hardware's defined slot limits. A local attacker could exploit this by supplying an invalid...

CVE-2026-72496

A flaw was found in the Linux kernel's RDMA/bnxtre component. When the bnxtqpliballocdpi function attempts to map I/O memory ioremap, it may not properly handle failures. This oversight could lead to system instability or a denial of service DoS condition, as the system might proceed with an...

CVE-2026-72494

A flaw was found in the Linux kernel's RDMA/irdma driver. The driver utilized a waitqueue and a requestdone flag for synchronization without adequate memory barriers. This oversight could lead to a race condition, potentially causing unpredictable system behavior or instability...

CVE-2026-72499

A flaw was found in the Linux kernel's RDMA/bnxtre component. During firmware teardown, a memory page is prematurely freed. An NQ interrupt arriving at this time can write data to this already-freed memory, leading to memory corruption. This could potentially result in a system crash or other...

CVE-2026-72498

A flaw was found in the Linux kernel's RDMA/bnxtre component. This vulnerability occurs when a user dumps information about a Memory Region MR using the rdma tool, inadvertently exposing a kernel pointer. The exposure of this pointer, mrhwq, could provide an attacker with sensitive details about...

CVE-2026-72491

A flaw was found in the Linux kernel's net/9p RDMA transport module. An inconsistent locking mechanism around the rdma-state field allows for a race condition during connection teardown. This can lead to lost state transitions, corrupting the connection state machine. Consequently, a use-after-fr...

CVE-2026-72468

A flaw was found in the Linux kernel's xprtrdma component. A local administrator can exploit a race condition during an NFS/RDMA mount operation against RDMA device removal. This can lead to a null pointer dereference, causing the kernel to crash and resulting in a Denial of Service DoS...

CVE-2026-72469

A flaw was found in the xprtrdma component of the Linux kernel. An attacker could potentially exploit a use-after-free vulnerability due to an improper handling of Remote Direct Memory Access RDMA connection events. Specifically, an address change event occurring before a connection is fully...

CVE-2026-72467

A flaw was found in the Linux kernel's xprtrdma module. The system fails to properly check the return value of frwrwpcreate, which is responsible for creating a Memory Region. If this creation fails, a subsequent Network File System NFS over Remote Direct Memory Access RDMA read operation with an...

CVE-2026-72465

A flaw was found in the Linux kernel's xprtrdma component. A remote attacker can exploit this by sending specially crafted RPC over RDMA replies containing an inflated credit grant. This vulnerability can lead to excessive allocation of Receive Work Requests, potentially causing a Denial of Servi...

CVE-2026-72464

A flaw was found in the kernel's xprtrdma module. A remote attacker can exploit this by sending a sustained stream of malformed Remote Procedure Call over Remote Direct Memory Access RPC/RDMA replies. These malformed replies, which are either too short or carry an unrecognized RPC/RDMA version, c...