Количество 15
Количество 15
CVE-2026-74378
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A concurrent userspace thread can modify num_sge between validation and use, causing a heap buffer overflow when copying the WQE into qp->resp.srq_wqe. Read num_sge into a local variable and use it for both the bounds check and the size calculation.
CVE-2026-74378
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A concurrent userspace thread can modify num_sge between validation and use, causing a heap buffer overflow when copying the WQE into qp->resp.srq_wqe. Read num_sge into a local variable and use it for both the bounds check and the size calculation.
CVE-2026-74378
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A concurrent userspace thread can modify num_sge between validation and use, causing a heap buffer overflow when copying the WQE into qp->resp.srq_wqe. Read num_sge into a local variable and use it for both the bounds check and the size calculation.
CVE-2026-74378
In the Linux kernel, the following vulnerability has been resolved: R ...
ROS-20260917-80-0041
Уязвимость kernel-lt
ROS-20260917-73-0034
Уязвимость kernel-lt
GHSA-7vv8-3m2v-67j6
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A concurrent userspace thread can modify num_sge between validation and use, causing a heap buffer overflow when copying the WQE into qp->resp.srq_wqe. Read num_sge into a local variable and use it for both the bounds check and the size calculation.
ELSA-2026-500329
ELSA-2026-500329: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2026:4595-1
Security update for the Linux Kernel
SUSE-SU-2026:4284-1
Security update for the Linux Kernel
SUSE-SU-2026:4369-1
Security update for the Linux Kernel
SUSE-SU-2026:4282-1
Security update for the Linux Kernel
ELSA-2026-500377
ELSA-2026-500377: Unbreakable Enterprise kernel security update (IMPORTANT)
openSUSE-SU-2026:21910-1
Security update for the Linux Kernel
ELSA-2026-500248
ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-74378 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A concurrent userspace thread can modify num_sge between validation and use, causing a heap buffer overflow when copying the WQE into qp->resp.srq_wqe. Read num_sge into a local variable and use it for both the bounds check and the size calculation. | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-74378 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A concurrent userspace thread can modify num_sge between validation and use, causing a heap buffer overflow when copying the WQE into qp->resp.srq_wqe. Read num_sge into a local variable and use it for both the bounds check and the size calculation. | CVSS3: 7 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-74378 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A concurrent userspace thread can modify num_sge between validation and use, causing a heap buffer overflow when copying the WQE into qp->resp.srq_wqe. Read num_sge into a local variable and use it for both the bounds check and the size calculation. | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-74378 In the Linux kernel, the following vulnerability has been resolved: R ... | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
 | ROS-20260917-80-0041 Уязвимость kernel-lt | CVSS3: 7.8 | 0% Низкий | 26 дней назад |
| ROS-20260917-73-0034 Уязвимость kernel-lt | CVSS3: 7.8 | 0% Низкий | 26 дней назад |
| GHSA-7vv8-3m2v-67j6 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive queue buffer, which is mapped into userspace. It validates num_sge against max_sge, but then re-reads the same field to calculate the memcpy size. A concurrent userspace thread can modify num_sge between validation and use, causing a heap buffer overflow when copying the WQE into qp->resp.srq_wqe. Read num_sge into a local variable and use it for both the bounds check and the size calculation. | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
| ELSA-2026-500329 ELSA-2026-500329: Unbreakable Enterprise kernel security update (IMPORTANT) | 26 дней назад | ||
 | SUSE-SU-2026:4595-1 Security update for the Linux Kernel | 5 дней назад | ||
| SUSE-SU-2026:4284-1 Security update for the Linux Kernel | 20 дней назад | ||
| SUSE-SU-2026:4369-1 Security update for the Linux Kernel | 15 дней назад | ||
| SUSE-SU-2026:4282-1 Security update for the Linux Kernel | 21 день назад | ||
| ELSA-2026-500377 ELSA-2026-500377: Unbreakable Enterprise kernel security update (IMPORTANT) | 6 дней назад | ||
| openSUSE-SU-2026:21910-1 Security update for the Linux Kernel | 21 день назад | ||
| ELSA-2026-500248 ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 месяца назад |
Уязвимостей на страницу