CVE-2026-120426

OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded currentuser parameter into the file path, which the portal forwards with...

EUVD-2026-115235

OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded currentuser parameter into the file path, which the portal forwards with...

CVE-2026-120426

OpenCSG CSGHub (through version v2.6.0-ce ) is vulnerable to an authorization bypass in the unauthenticated file resolve route. This flaw allows remote attackers to read private repository files, including model, code, or space repositories . The root cause is the ability for an attacker to injec...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989021 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdmaresolveroute memory leak Fix a memory leak when mdaresolveroute is called more...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986316 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdmaresolveroute memory leak Fix a memory leak when mdaresolveroute is called more...

SUSE CVE-2021-47345

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdmaresolveroute memory leak Fix a memory leak when "mdaresolveroute is called more than once on the same "rdmacmid". This is possible if cmaqueryhandler triggers the RDMACMEVENTROUTEERROR flow which puts the state...

PT-2021-29893

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A memory leak issue exists in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.24...

PT-2021-29817

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven...

PT-2021-29684

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-25927

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description A memory leak issue was discovered in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25763

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven...

PT-2021-25898

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A memory leak issue exists in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.24...

PT-2021-29952

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description A memory leak issue was discovered in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29758

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-25957

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description A memory leak issue was discovered in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29922

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description A memory leak issue was discovered in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2024-11344

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs when mda resolve route is called more than once on the same rdma cm id. This can happen if cma query handler triggers the RDMA CM EVENT ROUTE ERROR flow, which puts...