Lucene search
+L

106 matches found

RedhatCVE
RedhatCVE
•added 2026/10/09 9:22 a.m.•5 views

CVE-2026-98253

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. A local attacker can cause a Denial of Service DoS or memory corruption by exploiting a race condition in the User Connection Manager Access ucma component. This issue occurs when concurrent multicast join requests...

7.8CVSS6.2AI score0.00138EPSS
SaveExploits0References4
OSV
OSV
•added 2026/10/06 9:18 a.m.•10 views

DEBIAN-CVE-2026-98253

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS5.9AI score0.00138EPSS
SaveExploits0References1
OSV
OSV
•added 2026/10/06 9:18 a.m.•8 views

AZL-106368 CVE-2026-98253 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 9:18 a.m.•9 views

CVE-2026-98253

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS0.00138EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/10/06 9:18 a.m.•9 views

CVE-2026-98253

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References10
OSV
OSV
•added 2026/10/06 9:18 a.m.•7 views

UBUNTU-CVE-2026-98253

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS5.9AI score0.00138EPSS
SaveExploits0References11
CVE
CVE
•added 2026/10/06 8:45 a.m.•14 views

CVE-2026-98253

The Linux kernel is vulnerable to a race condition in the RDMA/ucma component during concurrent JOIN_MCAST calls. The root cause is that ucma_process_join() previously released ctx->mutex after a successful join, allowing two concurrent calls with the same address to insert a second CMA entry....

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/06 8:45 a.m.•28 views

CVE-2026-98253 RDMA/ucma: Serialize join and leave on copy_to_user failure

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS0.00138EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/06 8:45 a.m.•9 views

EUVD-2026-93181

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

5.8AI score0.00138EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/10/06 8:45 a.m.•12 views

CVE-2026-98253

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS5.9AI score0.00138EPSS
SaveExploits0
OSV
OSV
•added 2026/10/06 8:45 a.m.•7 views

CVE-2026-98253 RDMA/ucma: Serialize join and leave on copy_to_user failure

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS5.9AI score
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•5 views

CVE-2026-98253: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-98253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through...

7.8CVSS5.9AI score0.00138EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/ucma component where ucma process join drops the ctx-mutex after a successful join and only retakes it if copy to user fails. This allows two concurrent JOIN...

7.8CVSS5.7AI score0.00138EPSS
SaveExploits0References10
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•9 views

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel before version 5.10. The file drivers/infiniband/core/ucma.c contains a use-after-free, as the context of the ctx variable is accessed through ctxlist in certain situations where ucmamigrateid is called, specifically when ucmaclose is invoked. This issue...

7.8CVSS6.6AI score0.01476EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•10 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/ucma: Protects mc during concurrent multicast leaves. The commit mentioned in the “Fixes” section has been partially reverted to ensure that the allocation and erasure of multicast structures are locked. BUG: KASAN:...

7.8CVSS6.3AI score0.00238EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/12 4:27 p.m.•26 views

SUSE CVE-2026-89507

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued for a ctx while ucmamigrateid moves it to another file. The CM core take...

7.8CVSS5.8AI score0.00173EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/12 4:27 p.m.•10 views

SUSE CVE-2026-89508

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...

7.8CVSS6.2AI score0.00126EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/12 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-89507

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued fo...

7.8CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/12 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-89508

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file...

7.8CVSS5.9AI score0.00126EPSS
SaveExploits0References3
Rows per page
Query Builder