5 matches found
CVE-2026-74377 RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...
EUVD-2026-59524
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields directly from the shared queue buffer mapped into userspace. This allows a malicious user to modify fields like numsge or...
PT-2026-72813
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the RDMA/rxe component, the responder reads Work Queue Element WQE fields directly from a shared queue buffer mapped into userspace for non-SRQ Queue Pairs QPs. This allows a maliciou...
kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever
A flaw was found in the Linux kernel's x86/fpu module, which revolves around an issue with relying on user space for critical information regarding the xsave buffer. In the affected scenario, the expected size of the user space buffer is derived from user-controlled data, specifically,...
CVE-2024-26603
A flaw was found in the Linux kernel's x86/fpu module, which revolves around an issue with relying on user space for critical information regarding the xsave buffer. In the affected scenario, the expected size of the user space buffer is derived from user-controlled data, specifically,...