Brendan Cunningham

Libevent/10542 CVE fixes v4.1.x

17

I'd appreciate feedback on the following in particular: 1. I am not the author of these commits but ompi/v4.1.x already uses the libevent code; should I get the original authors...

ompi/v4.1.x libevent code has CVEs that are fixed in libevent/master.

4

## Background information A security tool we use identified three CVEs (1x Critical, 2x High) in ompi/v4.1.x's copy of libevent. These CVEs are fixed in libevent/master. Here are the CVEs...

nvidia_p2p_get_pages(): Fix double-free in register-callback error path

2

Double-free in rm_p2p_register_callback() error-path in nv_p2p_get_pages() causes memory corruption that leads to a kernel panic. Fix this by adding a separate goto for this error path that skips freeing the...

[Issue]: free_callback passed into rdma_get_pages() never called

11

### Problem Description # TLDR `amdgpu` does not call the free callback that our Linux kernel driver passes into `rdma_get_pages()`. Results in stale ROCm-buffer:DMA-mapped-page cache entries and wrong cache entry...

[Issue]: kmemleak "unreferenced object...(size 32)" reports for memory allocated in amdgpu_vm_update_range()

5

### Problem Description After running `osu_bibw -m 256:256 D D` across two nodes, I see "unreferenced object" memory leak reports like so: ``` unreferenced object 0xffff940d27c6aae0 (size 32): comm "osu_bibw",...