Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
Sashiko points out that pd->uctx isn't initialized until late in the function so all these error flow references are NULL and will crash. Use the uctx that isn't NULL.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= fe2caefcdf5869f308c102e3d64d40683bfad711, < b610f33c5523fe26f6dd897667fff9c7a1de5905; >= fe2caefcdf5869f308c102e3d64d40683bfad711, < 443c991fbc954cc9363e963c09f404b9f281f3a2; >= fe2caefcdf5869f308c102e3d64d40683bfad711, < 27b6eb1f27fda9bdd5cae028e396758cdf525845; >= fe2caefcdf5869f308c102e3d64d40683bfad711, < e01a957561f663d3b68d2fd233a4502e3367efcd; >= fe2caefcdf5869f308c102e3d64d40683bfad711, < 75fc130664ae324e7b2f9ad3630e0f175e9ca6c8; >= fe2caefcdf5869f308c102e3d64d40683bfad711, < 8832626a483439e207734e027afff322ccdf726e; >= fe2caefcdf5869f308c102e3d64d40683bfad711, < ec44c00a4fe1327efa35083f98b39c01cb535a51; >= fe2caefcdf5869f308c102e3d64d40683bfad711, < 34fbf48cf3b410d2a6e8c586fa952a36331ca5ba |
| Linux | Linux | 3.5 |
References
- https://git.kernel.org/stable/c/27b6eb1f27fda9bdd5cae028e396758cdf525845Patch
- https://git.kernel.org/stable/c/34fbf48cf3b410d2a6e8c586fa952a36331ca5baPatch
- https://git.kernel.org/stable/c/443c991fbc954cc9363e963c09f404b9f281f3a2Patch
- https://git.kernel.org/stable/c/75fc130664ae324e7b2f9ad3630e0f175e9ca6c8Patch
- https://git.kernel.org/stable/c/8832626a483439e207734e027afff322ccdf726ePatch
- https://git.kernel.org/stable/c/b610f33c5523fe26f6dd897667fff9c7a1de5905Patch
- https://git.kernel.org/stable/c/e01a957561f663d3b68d2fd233a4502e3367efcdPatch
- https://git.kernel.org/stable/c/ec44c00a4fe1327efa35083f98b39c01cb535a51Patch
Timeline
- Published
- May 28, 2026
- Last modified
- Nov 6, 2026
- NVD status
- Undergoing Analysis