85 matches found
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021620)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021620 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression cmd.wqesize cmd.wrcount, both...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000850)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000850 advisory. The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs f...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002050)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002050 advisory. The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs f...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-422683)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-422683 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression cmd.wqesize cmd.wrcount, both...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414351)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414351 advisory. An issue was discovered in the Linux kernel through 5.16-rc6. uapifinalize in drivers/infiniband/core/uverbsuapi.c lacks check of kmallocarray. Tenable has extracted...
EUVD-2024-53793
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-3105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.16-rc6. uapifinalize in drivers/infiniband/core/uverbsuapi.c lacks check of kmallocarray. CVE-2022-3105 No...
kernel: RDMA/uverbs: Prevent integer overflow issue
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqesize cmd.wrcount", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pass the result to...
The vulnerability of the uverbs_request_next_ptr() function in the driver (drivers/infiniband/core/uverbs_cmd.c) of the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the uverbsrequestnextptr function in the driver drivers/infiniband/core/uverbscmd.c of the Linux kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure...
CVE-2024-57890
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqesize cmd.wrcount", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pass the result to...
SUSE CVE-2024-57890
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqesize cmd.wrcount", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pass the result to...
AZL-55853 CVE-2024-57890 affecting package kernel for versions less than 5.15.176.3-1
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqesize cmd.wrcount", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pass the result to...
DEBIAN-CVE-2024-57890
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqesize cmd.wrcount", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pass the result to...
UBUNTU-CVE-2024-57890
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqesize cmd.wrcount", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pass the result to...
CVE-2024-57890 RDMA/uverbs: Prevent integer overflow issue
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqesize cmd.wrcount", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pass the result to...
CVE-2024-57890 RDMA/uverbs: Prevent integer overflow issue
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqesize cmd.wrcount", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pass the result to...
CVE-2024-57890
CVE-2024-57890 affects the Linux kernel RDMA/uverbs path. The issue is an integer overflow in user-supplied values during multiplications: cmd.wqe_size * cmd.wr_count and cmd.sge_count * sizeof(struct ib_uverbs_sge). On 32‑bit systems these can overflow, and the result may wrap as it’s passed to ...
SUSE CVE-2010-4649
Integer overflow in the ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a large value of a certain structure member...
SUSE CVE-2014-8159
The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a...