In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 30, 2025 |
| Ubuntu | — | Upgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.4Upgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-xilinx-zynqmpUpgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-intel-iotg-5.15Upgrade linuxUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-realtimeUpgrade linux-azureUpgrade linux-nvidia-tegra-5.15Upgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-oracle-5.15Upgrade linux-gkeUpgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-ibm-5.15Upgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-nvidia-tegraUpgrade linux-intel-iotgUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15 | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub