Linux Distros Unpatched Vulnerability : CVE-2026-93277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero t...

UBUNTU-CVE-2026-93277

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

CVE-2026-93277 RDMA/bnxt_re: Validate udata before executing commands

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

CVE-2026-93277

The Linux kernel contains a vulnerability in the RDMA/bnxt_re driver. The issue arises because destroy callbacks currently zero the udata output after tearing down driver resources; however, if userspace access fails, uverbs preserves the uobject , allowing the destroy callback to execute again e...

CVE-2026-93277 RDMA/bnxt_re: Validate udata before executing commands

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

EUVD-2026-86149

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

CVE-2026-93277: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

PT-2026-97964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/bnxt re component where destroy callbacks zero the udata output after driver resources are torn down. If userspace access fails, uverbs preserves the uobject...

SUSE CVE-2026-89506

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBSATTRUHW to UVERBSMETHODREGMR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with regmr that cannot be passed through the ioctl. They also assume that the udata cann...

Linux Distros Unpatched Vulnerability : CVE-2026-89506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/uverbs: Add UVERBSATTRUHW to UVERBSMETHODREGMR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with regmr that...

CVE-2026-89506

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBSATTRUHW to UVERBSMETHODREGMR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with regmr that cannot be passed through the ioctl. They also assume that the udata cann...

EUVD-2026-76412

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBSATTRUHW to UVERBSMETHODREGMR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with regmr that cannot be passed through the ioctl. They also assume that the udata cann...

CVE-2026-89506 RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBSATTRUHW to UVERBSMETHODREGMR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with regmr that cannot be passed through the ioctl. They also assume that the udata cann...

CVE-2026-89506: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBSATTRUHW to UVERBSMETHODREGMR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with regmr that cannot be passed through the ioctl. They also assume that the udata cann...

PT-2026-90222

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/uverbs component where the UVERBS METHOD REG MR method failed to include UVERBS ATTR UHW. This omission affects the mthca, irdma, and siw drivers, which have...

CVE-2026-80619: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing udata-size after calling aaputloaddataudata, causing a potential UAF. Fixed this by saving the size to a local variable before dropping...

csv-detective (>=0.7.2.dev800, <=0.8.1.dev1416), datagouv-client (>=0.1.0.dev0, <=0.1.1.dev139) +1 more potentially affected by CVE-2025-71176 via pytest (8.3.0)

pytest PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - csv-detective =0.7.2.dev800, =0.1.0.dev0, =1.1.0, =3.0.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

CVE-2026-31492

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access irdma driver. This vulnerability occurs when the freeqp completion is not properly initialized before being used during the cleanup process in irdmadestroyqp, specifically if the ibcopytoudata function fails. An attacker coul...

csv-detective (>=0.7.2.dev800, <=0.8.1.dev1416), datagouv-client (>=0.1.0.dev0, <=0.1.1.dev139) +1 more potentially affected by CVE-2025-71176 via pytest (8.3.0)

pytest PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - csv-detective =0.7.2.dev800, =0.1.0.dev0, =1.1.0, =3.0.0 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003829 advisory. A memory leak in the bnxtrecreatesrq function in drivers/infiniband/hw/bnxtre/ibverbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of...