9.8
Critique
CVE-2021-47378 In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to…
Description
In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid use after free We should always destroy cm_id before destroy qp to avoid to get cma event after qp was destroyed, which may lead to use after free. In RDMA connection establishment error flow, don't destroy qp in cm event handler.Just report cm_error to upper level, qp will be destroy in nvme_rdma_alloc_queue() after destroy cm id.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 5.15 | premières → < 5.15 | 5.15 |
| Linux 5.14 | premières → < 5.14.9 | 5.14.9 |
| Linux 5.10 | premières → < 5.10.70 | 5.10.70 |
| Linux | 4.8 | Pas de correctif indiqué |
| linux_kernel 5.15 | premières → < 5.15 | 5.15 |
Autres CVE de Linux
Les 18300 CVE de Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Non notée
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Non notée
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Non notée
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Non notée