kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

PT-2024-32719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises in the Linux kernel when directories have many dentries, causing the fsnotify update child dentry flags function to take significant time under inode-i lock. This leads ...

kernel: io_uring/rw: defer fsnotify calls to task context

A locking context violation was found in the Linux kernel's iouring subsystem. The fsnotify calls were being made directly from kiocb completion context, which can execute in soft or hard IRQ context. This causes lockdep warnings when fsnotify attempts memory allocation with GFPKERNEL flags, whic...

Oracle Linux 7 : ELSA-2017-2473-1: / kernel (ELSA-2017-24731)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-24731 advisory. - Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory...

SUSE CVE-2017-7533

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory corruption via a crafted application that leverages simultaneous execution of the inotifyhandleevent and vfsrename functions...

GSD-2022-1006797 io_uring/rw: defer fsnotify calls to task context

iouring/rw: defer fsnotify calls to task context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35052 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the io uring/rw component, where fsnotify calls are not properly deferred to the task context. This could potentially lead to security vulnerabilities, although the...

GSD-2022-1004016 fsnotify: fix wrong lockdep annotations

fsnotify: fix wrong lockdep annotations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003799 fsnotify: fix wrong lockdep annotations

fsnotify: fix wrong lockdep annotations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003639 fsnotify: fix wrong lockdep annotations

fsnotify: fix wrong lockdep annotations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003426 fsnotify: fix wrong lockdep annotations

fsnotify: fix wrong lockdep annotations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003134 fsnotify: fix wrong lockdep annotations

fsnotify: fix wrong lockdep annotations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002799 fsnotify: fix wrong lockdep annotations

fsnotify: fix wrong lockdep annotations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31689

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to wrong lockdep annotations in fsnotify. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.46,...

PT-2022-31062

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to wrong lockdep annotations in fsnotify. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.3,...

PT-2022-32279

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.8 through 4.14.282 Description The issue is related to wrong lockdep annotations in fsnotify. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.8 through...

PT-2022-32062

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.8 through 5.4.197 Description The issue is related to wrong lockdep annotations in fsnotify. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.8 through...

PT-2022-31902

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.8 through 5.10.120 Description The issue is related to wrong lockdep annotations in fsnotify. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.8 through...

PT-2022-32176

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to wrong lockdep annotations in fsnotify. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.19.24...

PT-2022-31397

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.8 through 5.17.13 Description The issue is related to wrong lockdep annotations in fsnotify. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.8 through...