Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-default | Jul 21, 2017 | Feb 22, 2017 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.10.0-27-lowlatency | Jul 21, 2017 | Feb 22, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub