In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Free the UAR index returned by the hardware.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
References 6
https://git.kernel.org/stable/c/449ae7927152e46acbe5f19f97eafdae6d3a96b1
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6f83de384ca582fa87b4c2b0d03bd1ed3bf9a2ee
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/80f1f49f53a42733e60c90e0ec545e647969214d
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/aabfc845838ef453f1d22d7665596f9cc48be7dd
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d3ff718c0c7153e2641e6a09507bace14fc5c402
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ef369446f62903ea079e8a7954b5bf8bb8300fe3
416baaa9-dc9f-4396-8d5f-8c081fb06d67