In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 30, 2025 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-oracle-5.15Upgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-aws-5.15Upgrade linux-bluefieldUpgrade linux-nvidia-tegraUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iot-realtimeUpgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-iotUpgrade linux-azure-5.15Upgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linuxUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linux-azure-fips | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub