PT-2021-28626

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-24913

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.19.184 through 4.19.190 Description: A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v4.19.184 and is fixed in version v4.19.191...

PT-2021-28784

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.27 through v5.10.37 Description A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v5.10.27 and is fixed in version v5.10.38. Recommendations F...

PT-2021-24627

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-24594

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5...

PT-2021-28575

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ACPI GTDT, where interrupt mappings can be corrupted on watchdog probe failure. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-28665

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.4 Description A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v5.12 and is fixed in version v5.12.5. Recommendations For Linux...

PT-2021-24554

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2021-28611

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.10.35 Description The issue is related to the ACPI GTDT, where interrupt mappings can be corrupted on watchdog probe failure. The actual impact and attack plausibility have not yet been proven...

PT-2021-28536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.12.2 Description The issue is related to the ACPI GTDT, where interrupt mappings can be corrupted on watchdog probe failure. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2021-24581

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ACPI GTDT, where interrupt mappings can be corrupted on watchdog probe failure. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-28621

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A potential use-after-free issue was identified in the ACPI custom method. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.4 and is...

PT-2021-24656

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-24632

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-28588

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5...

PT-2021-24542

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue is related to the ACPI GTDT, where interrupt mappings can be corrupted on watchdog probe failure. The actual impact and attack plausibility have not yet been proven. Recommendation...

kernel security, bug fix, and enhancement update

4.18.0-305.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x...

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2021-1875)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. Setparamprefix in the menu rendering code performs a length calculation on the assumption th...

openSUSE Security Update : the Linux Kernel (openSUSE-2021-716)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2021-29650: The netfilter subsystem allowed attackers to cause a denial of service panic because net/netfilter/xtables.c and include/linux/netfilter/xtables.h lack a...