In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow When cur_qp isn't NULL, in order to avoid fetching the QP from the radix tree a…
High CVSS 8.8
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow When cur_qp isn't NULL, in order to avoid fetching the QP from the radix tree again we check if the next cqe QP is identical to the one we already have. The bug however is that we are checking if the QP is identical by checking the QP number inside the CQE against the QP number inside the mlx5_ib_qp, but that's wrong since the QP number from the CQE is from FW so it should be…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/3b97d77049856865ac5ce8ffbc6e716928310f7f Patch
- https://git.kernel.org/stable/c/55c65a64aefa6267b964d90e9a4039cb68ec73a5 Patch
- https://git.kernel.org/stable/c/5ed3b0cb3f827072e93b4c5b6e2b8106fd7cccbd Patch
- https://git.kernel.org/stable/c/7c51a6964b45b6d40027abd77e89cef30d26dc5a Patch
- https://git.kernel.org/stable/c/856d9e5d72dc44eca6d5a153581c58fbd84e92e1 Patch
- https://git.kernel.org/stable/c/cad677085274ecf9c7565b5bfc5d2e49acbf174c Patch
- https://git.kernel.org/stable/c/d52636eb13ccba448a752964cc6fc49970912874 Patch
- https://git.kernel.org/stable/c/dc7139b7031d877acd73d7eff55670f22f48cd5e Patch
- https://git.kernel.org/stable/c/f0447ceb8a31d79bee7144f98f9a13f765531e1a Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Timeline
- nvd_ingest NVD