PT-2021-24594

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5...

PT-2021-24627

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-24632

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-24542

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue is related to the ACPI GTDT, where interrupt mappings can be corrupted on watchdog probe failure. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-24935

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.14.228 through 4.14.232 Description: A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v4.14.228 and is fixed in version v4.14.233...

PT-2021-28942

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9.264 through 4.9.268 Description A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v4.9.264 and is fixed in version v4.9.269. The actual impact a...

PT-2021-28929

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.228 through 4.14.232 Description A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v4.14.228 and is fixed in version v4.14.233. Recommendations...

PT-2021-24656

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-28588

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A potential use-after-free issue exists in the custom method of the ACPI component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5...

PT-2021-24790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.27 through v5.10.37 Description A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v5.10.27 and is fixed in version v5.10.38. Recommendations F...

PT-2021-24617

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the ACPI GTDT, where interrupt mappings can be corrupted on watchdog probe failure. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-28575

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ACPI GTDT, where interrupt mappings can be corrupted on watchdog probe failure. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-28621

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A potential use-after-free issue was identified in the ACPI custom method. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.4 and is...

PT-2021-24876

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.109 through 5.4.119 Description: A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v5.4.109 and is fixed in version v5.4.120. The actual impact...

PT-2021-28784

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.27 through v5.10.37 Description A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v5.10.27 and is fixed in version v5.10.38. Recommendations F...

PT-2021-28665

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.4 Description A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v5.12 and is fixed in version v5.12.5. Recommendations For Linux...

kernel security, bug fix, and enhancement update

4.18.0-305.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x...

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

openSUSE Security Update : the Linux Kernel (openSUSE-2021-716)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2021-29650: The netfilter subsystem allowed attackers to cause a denial of service panic because net/netfilter/xtables.c and include/linux/netfilter/xtables.h lack a...

EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2021-1875)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. Setparamprefix in the menu rendering code performs a length calculation on the assumption th...