Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: A out-of-bounds write issue has been fixed in the irdmacopyuserpgaddrs function. The irdmacopyuserpgaddrs function iterates through all of the umem DMA blocks to populate the PBLEs. It will stop when either the last D...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fixed the error path for FRMR set pinned push operations. Added functionality to destroy FRMR handles in case the push operation to the pool fails. This prevents resource leaks if the pool page allocation fails...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Modified the print level of CQE errors. Excessive printing may cause panic in the kernel. Change ibdeverr to ibdeverrratelimited, and adjust the printing level of CQE dumps to debug level...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Treat all calls as non-bcalls when bcserv is NULL. When a rdma server returns a fault format reply, the nfs v3 client may treat it as a bcall when the bc service does not exist. The debug message for rpcrdmabcreceivecal...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hns: Fixed a soft lockup that occurred during the loop that allocates BT pages. The driver executes a for-loop when allocating BT pages and mapping them with buffer pages. When allocating a large buffer e.g., an MR of ove...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fixed a hang that occurred when cmaneteventcallback failed to call queuework. The referenced commit addressed a crash that occurred when cmaneteventcallback was called for a cmaid, while work on that id from a previous...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: The reply credit grant must be sanified after parsing. The outnorqst exit in rpcrdmareplyhandler branches away before the credit clamping step occurs. As a result, a reply that matches no pending requests will still rea...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Avoid displaying the kernel pointer. When dumping information related to MR using the rdma tool, we also dump the mrhwq, which is a kernel pointer. There is no need to expose this value to end users. Therefore, avoid...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Avoid repeated requests to allocate WC pages. Applications can request multiple WC pages for the same ucontext. Currently, only 1 WC page per ucontext is supported. Add a lock to avoid concurrent access, and implemen...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwrwpcreate during the connect process. frwrwpcreate creates a singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. In case of failure, it returns a negative...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Fixed the issue where UMR XLT cleanup was performed during ODDP population failures. The mlx5rumrupdatexlt function allocates and DMA maps an XLT buffer using mlx5rumrcreatexlt. The buffer is released through the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Added a max slot check for SQ. The variable WQE mode must be validated against the maximum number of slots supported by the hardware. The maximum supported value is 64K. A check for the maximum and minimum values is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/core: Fixed the issue of FRMR aging push-to-queue errors. Aging pools with pinned handles require moving handles from the active queue to a non-empty inactive queue. This may fail during new page allocation. Currently, we...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replaced waitqueue and flag with completion. The driver previously used a waitqueue along with an explicit requestdone flag, but there were no proper barriers around the requestdone operation. A previous patch by...

CVE-2026-74584

A flaw was found in the Linux kernel's RDMA/bnxtre component. A local attacker with access to the RDMA device could exploit this vulnerability due to a failure to zero out a shared memory page before exposing it to userspace. This could lead to information disclosure, allowing the attacker to rea...

K000163056: Linux kernel vulnerability CVE-2026-53133, CVE-2026-53176, CVE-2026-53215, CVE-2026-53265

Security Advisory Description CVE-2026-53133 In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes = 4G When the iommu is used the linearization of the mapping can give a single block that is very large split across multiple SG entries. When...

Vulnerability of RDMA/iwcm components of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of RDMA/iwcm components in Linux operating systems is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of RDMA/rxe components of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of RDMA/rxe components in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-74584

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: zero shared page before exposing to userspace bnxtreallocucontext allocates uctx-shpg via getfreepageGFPKERNEL. The buddy allocator does not zero...

The vulnerability of the RDMA/mlx5 component of the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the RDMA/mlx5 component of the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...