CVE-2023-2430 affecting package kernel for versions less than 5.15.137.1-1

CVE-2023-2430 affecting package kernel for versions less than 5.15.137.1-1. A patched version of the package is available...

CVE-2023-5717 affecting package kernel for versions less than 5.15.137.1-1

CVE-2023-5717 affecting package kernel for versions less than 5.15.137.1-1. A patched version of the package is available...

CVE-2023-46813 affecting package kernel for versions less than 5.15.137.1-1

CVE-2023-46813 affecting package kernel for versions less than 5.15.137.1-1. A patched version of the package is available...

CVE-2023-42752 affecting package kernel for versions less than 5.15.137.1-1

CVE-2023-42752 affecting package kernel for versions less than 5.15.137.1-1. A patched version of the package is available...

AZL-31267 CVE-2023-39189 affecting package kernel for versions less than 5.15.135.1-2

A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnlosfaddcallback function did not validate the user mode controlled optnum field. This flaw allows a local privileged CAPNETADMIN attacker to trigger an out-of-bounds read, leading to a crash or information disclosure...

AZL-31149 CVE-2023-5345 affecting package kernel for versions less than 5.15.135.1-2

A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3fscontextparseparam, ctx-password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading pas...

AZL-30050 CVE-2023-42753 affecting package kernel for versions less than 5.15.135.1-2

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

AZL-28676 CVE-2023-4244 affecting package kernel for versions less than 5.15.135.1-2

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. Due to a race condition between nftables netlink control plane transaction and nftset element garbage collection, it is possible to underflow the reference...