SUSE-SU-2024:3551-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: actct: fix skb leak and crash on ooo frags bsc1221610. - CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocsho...

SUSE CVE-2024-42304

In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that has no dirblock but is non-inline, i.e. the first directory block is a hole. And no errors are reported when creating files in this...

CVE-2024-42304 ext4: make sure the first directory block is not a hole

In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that has no dirblock but is non-inline, i.e. the first directory block is a hole. And no errors are reported when creating files in this...

CVE-2024-42304

CVE-2024-42304 (Linux kernel ext4) : The vulnerability arises when the first directory block is a hole in non-inline directories, causing ext4_read_dirblock to mis-handle a hole read and potentially crash code that relies on "." and "..". The fix prevents loading corrupted data by reporting files...

CVE-2024-42304 ext4: make sure the first directory block is not a hole

In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that has no dirblock but is non-inline, i.e. the first directory block is a hole. And no errors are reported when creating files in this...

CVE-2022-42304

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code...

CVE-2022-42304

CVE-2022-42304 concerns Veritas NetBackup (Primary server) up to version 10.0 and related Veritas products. The issue is a SQL Injection affecting the idm, nbars, and SLP manager code. Root cause details across connected sources indicate the vulnerability resides in SQL injection pathways within ...

CVE-2022-42304

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code...

CVE-2021-42304

Azure RTOS Elevation of Privilege Vulnerability...

CVE-2021-42304

Azure RTOS Elevation of Privilege Vulnerability...

CVE-2021-42304 Azure RTOS Elevation of Privilege Vulnerability

...

CVE-2021-42304

CVE-2021-42304 is an Elevation of Privilege affecting Microsoft Azure RTOS. Connected sources label impact as obtaining increased entitlements and note that Microsoft has released fixes; remediation is to apply the updates via the standard Microsoft security guidance. The documents do not provide...

Vulnerabilities fixed in Microsoft Azure products

Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities allow a malicious party to gain elevated permissions and to obtain sensitive data. Azure RTOS: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...