Lucene search
+L

107 matches found

AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed the issue where the QP destruction operation was delayed until all references to QP were dropped. The completion of the QP destruction operation is delayed until all references to QP have been removed. The RDMA co...

9.8CVSS5.7AI score0.00716EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed the issue where immediate work requests were flushed to the completion queue prematurely. The opcode of the send queue element was correctly set during the flushing of immediate work requests in the post-sendqueue...

7.1CVSS6AI score0.00187EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed an issue where free was called after the memory was allocated. Our code analyzer reported a Use-after-Free UAF vulnerability. In the function siwallocmr, it calls siwmraddmemmr,.... In the implementation of...

7.8CVSS5.8AI score0.00268EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/15 6:22 a.m.7 views

AZL-96228 CVE-2026-74345 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siwsocketdisassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...

9.8CVSS5.8AI score0.00444EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/15 6:22 a.m.9 views

UBUNTU-CVE-2026-74345

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siwsocketdisassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...

9.8CVSS5.3AI score0.00444EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/15 5:58 a.m.34 views

CVE-2026-74345 RDMA/siw: Fix endpoint/socket association handling

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siwsocketdisassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...

9.8CVSS0.00444EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/15 5:58 a.m.9 views

EUVD-2026-59492

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siwsocketdisassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...

5.4AI score0.00444EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/15 5:58 a.m.46 views

CVE-2026-74345

The CVE-2026-74345 entry describes a Linux kernel vulnerability in the RDMA/siw driver where disassociating a socket from an endpoint may release the last reference to the endpoint, leading to a use-after-free if the endpoint’s socket pointer is cleared after the disassociation. The fix ensures t...

9.8CVSS5.3AI score0.00444EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/15 5:58 a.m.22 views

CVE-2026-74345 RDMA/siw: Fix endpoint/socket association handling

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siwsocketdisassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...

9.8CVSS5.5AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.19 views

PT-2026-72781

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siw socket disassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...

5.3AI score0.00444EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/11 4:47 p.m.10 views

CVE-2026-68417

A flaw was found in the Linux kernel's RDMA/siw component. The siwcreateqp function prematurely publishes a Queue Pair QP before its complete initialization. This allows a Queue Pair Number QPN lookup to access a QP that is still under construction, potentially leading to unexpected behavior or...

7.8CVSS5.3AI score0.0012EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/10 1:20 p.m.9 views

CVE-2026-68417

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siwcreateqp currently calls siwqpadd before the queues, CQ pointers, state, completion, and device list entry are ready. A QPN lookup can therefore reach a QP that is still being...

7.8CVSS0.0012EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/10 1:20 p.m.8 views

UBUNTU-CVE-2026-68417

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siwcreateqp currently calls siwqpadd before the queues, CQ pointers, state, completion, and device list entry are ready. A QPN lookup can therefore reach a QP that is still being...

7.8CVSS5.2AI score0.0012EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/10 12:04 p.m.8 views

EUVD-2026-55603

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siwcreateqp currently calls siwqpadd before the queues, CQ pointers, state, completion, and device list entry are ready. A QPN lookup can therefore reach a QP that is still being...

5.3AI score0.0012EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-68417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/siw: publish QP after initialization siwcreateqp currently calls siwqpadd before the queues, CQ pointers, state, completion, and device list entry are read...

7.8CVSS5.9AI score0.0012EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/25 10:17 a.m.11 views

CVE-2026-64268

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

9.8CVSS0.00714EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/25 8:49 a.m.49 views

CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

9.8CVSS0.00714EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/25 8:49 a.m.88 views

CVE-2026-64268

CVE-2026-64268 concerns a Linux kernel vulnerability in the SIW (RDMA) path where Read Response segments could overrun the sink buffer. The issue resides in siw_qp_rx.c (siw_proc_rresp) which places inbound Read Response DDP segments at sge->laddr + wqe->processed and accumulates processed ...

9.8CVSS6AI score0.00714EPSS
SaveExploits0References8Affected Software1
SUSE CVE
SUSE CVE
added 2026/07/21 12:59 p.m.10 views

SUSE CVE-2026-64102

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field chdr-mpalen, 16 bit big-endian, peer-controlled is smaller than the fixed DDP/RDMA...

9.8CVSS5.6AI score0.005EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/19 3:40 p.m.9 views

CVE-2026-64102

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field chdr-mpalen, 16 bit big-endian, peer-controlled is smaller than the fixed DDP/RDMA...

5.5AI score0.005EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder