https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 23:18:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74345 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>RDMA/siw: Fix endpoint/socket association handling</p> <p>Disassociating a socket from an endpoint via siw_socket_disassoc() may release the last reference on that endpoint and free it. Therefore, don&#39;t clear the endpoints socket pointer after calling that function, but within.</p> <p>This fixes a:</p> <p>BUG: KASAN: slab-use-after-free in siw_cm_work_handler (drivers/infiniband/sw/siw/siw_cm.c:1053 drivers/infiniband/sw/siw/siw_cm.c:1075)</p> <p>which occurred after processing a malformed MPA request during connection establishment, causing the new endpoint to be closed.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>RDMA/siw: Fix endpoint/socket association handling</p> <p>Disassociating a socket from an endpoint via siw_socket_disassoc() may release the last reference on that endpoint and free it. Therefore, don&#39;t clear the endpoints socket pointer after calling that function, but within.</p> <p>This fixes a:</p> <p>BUG: KASAN: slab-use-after-free in siw_cm_work_handler (drivers/infiniband/sw/siw/siw_cm.c:1053 drivers/infiniband/sw/siw/siw_cm.c:1075)</p> <p>which occurred after processing a malformed MPA request during connection establishment, causing the new endpoint to be closed.</p> https://vulnerability.circl.lu/vuln/cve-2026-74345