Lucene search
K

6 matches found

Microsoft CVE
Microsoft CVE
added 2025/11/28 1:1 a.m.2 views

RDMA/hns: Fix double destruction of rsv_qp

...

7.8CVSS8.7AI score0.00025EPSS
Exploits0
Cvelist
Cvelist
added 2025/08/19 5:3 p.m.5 views

CVE-2025-38582 RDMA/hns: Fix double destruction of rsv_qp

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsvqp rsvqp may be double destroyed in error flow, first in freemrinit, and then in hnsroceexit. Fix it by moving the freemrinit call into hnsrocev2init. listdel corruption, ffff589732eb9b50-ne...

0.00025EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the RDMA/hns module potentially double destroying rsvqp in the wrong path...

7.8CVSS8.3AI score0.00025EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/07/06 12:0 a.m.1 views

PT-2025-33780

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the RDMA/hns subsystem where rsv qp may be double destroyed during an error condition. This occurs first in free mr init and then in hns roce exit...

7.8CVSS5.9AI score0.00025EPSS
Exploits0
OSV
OSV
added 2024/10/21 1:15 p.m.1 views

DEBIAN-CVE-2024-47750

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsvqp on HIP08 Currently rsvqp is freed before ibunregisterdevice is called on HIP08. During the time interval, users can still dereg MR and rsvqp will be used in this process, leading to a UAF. Mo...

7.8CVSS6.2AI score0.0003EPSS
Exploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.0 views

UBUNTU-CVE-2024-47750

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsvqp on HIP08 Currently rsvqp is freed before ibunregisterdevice is called on HIP08. During the time interval, users can still dereg MR and rsvqp will be used in this process, leading to a UAF. Mo...

7.8CVSS6.5AI score0.0003EPSS
Exploits0References22
Rows per page
Query Builder