81 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: RDMA/ucma: Protects mc during concurrent multicast leaves. The commit mentioned in the “Fixes” section has been partially reverted to ensure that the allocation and erasure of multicast structures are locked. BUG: KASAN:...
Astra Linux – Vulnerability in Linux
A issue was discovered in the Linux kernel before version 5.10. The file drivers/infiniband/core/ucma.c contains a use-after-free, as the context of the ctx variable is accessed through ctxlist in certain situations where ucmamigrateid is called, specifically when ucmaclose is invoked. This issue...
Linux Distros Unpatched Vulnerability : CVE-2026-89507
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued fo...
Linux Distros Unpatched Vulnerability : CVE-2026-89508
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file...
CVE-2026-89507
A flaw was found in the Linux kernel's RDMA/ucma component. A race condition exists in the ucmawritecmevent function where it re-reads a critical file pointer multiple times without proper locking. This allows another function, ucmamigrateid, to change the file pointer mid-operation. An...
CVE-2026-89508
A flaw was found in the Linux kernel's RDMA/ucma component. A race condition exists in the ucmasetibpath function when handling events concurrently with ucmamigrateid. This can allow a local attacker with access to an RDMA device to trigger a use-after-free vulnerability, potentially leading to...
DEBIAN-CVE-2026-89507
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued for a ctx while ucmamigrateid moves it to another file. The CM core take...
AZL-100088 CVE-2026-89508 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...
DEBIAN-CVE-2026-89508
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...
CVE-2026-89508
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...
CVE-2026-89507
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued for a ctx while ucmamigrateid moves it to another file. The CM core take...
UBUNTU-CVE-2026-89507
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued for a ctx while ucmamigrateid moves it to another file. The CM core take...
CVE-2026-89507
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued for a ctx while ucmamigrateid moves it to another file. The CM core take...
CVE-2026-89508
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...
UBUNTU-CVE-2026-89508
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...
CVE-2026-89507
A race condition in the Linux kernel's RDMA/ucma subsystem affects the ucma_write_cm_event() function, which re-reads the ctx->file pointer four times without holding the handler lock. This allows ucma_migrate_id() to swap the pointer mid-sequence, leading to list corruption , a kernel BUG (cr...
CVE-2026-89508
A race condition in the Linux kernel's RDMA/ucma component allows a local attacker with an RDMA device to trigger a use-after-free . The function ucma_set_ib_path() calls ucma_event_handler() without holding the handler lock; a concurrent ucma_migrate_id() can reassign ctx->file mid-operation,...
CVE-2026-89508
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...
EUVD-2026-76413
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued for a ctx while ucmamigrateid moves it to another file. The CM core take...
CVE-2026-89507 RDMA/ucma: Lock the handler in ucma_write_cm_event()
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued for a ctx while ucmamigrateid moves it to another file. The CM core take...