AZL-53745 CVE-2024-50142 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a "xfrm: Validate address prefix lengths in the xfrm selector." syzbot created an SA with...

PT-2017-4150

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.3 Description The issue is related to the dccp disconnect function in the Linux kernel, which allows local users to gain privileges or cause a denial of service due to a use-after-free error. This can occur...