USN-7166-2 linux-aws, linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

USN-7166-1 linux, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

PT-2025-3315

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to the fixed version Description A bug in the Linux kernel has been resolved, specifically in the bpf get smp processor id function when CONFIG SMP is disabled. On x86-64, calling this function can trigger an error...

OESA-2024-2536 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb reclamation in ieee80211dostop Since 'devqueuexmit' should be called with interrupts enabled, the following backtrace:...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50162)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50162 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: devmap: provide rxq after redirect...

USN-7159-1 linux, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - S390 architecture; - x86 architecture; - Power management core; - GPU...

bpf: Make sure internal and UAPI bpf_redirect flags don't overlap

...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow timeout for anonymous sets CVE-2023-52620 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfslistxattr CVE-2023-52640 In the Linux kernel, th...

bpf Component DoS

The vulnerability of the bpf component in the Linux operating system’s kernel is related to improper validation of input data in the bpfprogtestrunrawtp function. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE SLES15 Security Update : kernel RT (Live Patch 1 for SLE 15 SP6) (SUSE-SU-2024:4139-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4139-1 advisory. This update for the Linux Kernel 6.4.0-150600105 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory...

kernel: bpf: Fix out-of-bounds write in trie_get_next_key()

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. A privileged local attacker could exploit an out-of-bounds write vulnerability in the triegetnextkey function. This occurs because the function attempts to write more data than the allocated buffer size, leading to memor...

kernel: bpf: Fix a sdiv overflow issue

A flaw was found in the kernel's Berkeley Packet Filter BPF subsystem. A privileged local user can trigger a signed division or modulo overflow when executing a BPF program on an x8664 system. This overflow can lead to a kernel exception and subsequently cause a system crash, resulting in a Denia...

SUSE SLES15 Security Update : kernel (Live Patch 2 for SLE 15 SP6) (SUSE-SU-2024:4209-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4209-1 advisory. This update for the Linux Kernel 6.4.0-1506002314 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory...

RHEL 9 : kernel (RHSA-2024:10945)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10945 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: bpf: Add BPFPROGTYPECGROUPSKB attach...

SUSE SLES15 Security Update : kernel (Live Patch 3 for SLE 15 SP6) (SUSE-SU-2024:4210-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4210-1 advisory. This update for the Linux Kernel 6.4.0-1506002317 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory...

[SECURITY] Fedora 41 Update: retsnoop-0.10.1-3.fc41

retsnoop is BPF-based tool that is meant to help debugging kernel issues. It allows to capture call stacks of kernel functions that return errors NULL or -Exxx and emits every such detected call stack, along with the captured results...

[SECURITY] Fedora 40 Update: retsnoop-0.10.1-3.fc40

retsnoop is BPF-based tool that is meant to help debugging kernel issues. It allows to capture call stacks of kernel functions that return errors NULL or -Exxx and emits every such detected call stack, along with the captured results...

PT-2024-10133

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to a use-after-free UAF vulnerability in the Linux kernel's BPF uprobe attachments. Uprobes use bpf prog run array uprobe under tasks-trace-RCU protection, but it is possib...

PT-2024-36974

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A race condition exists between element replacement and close in the Linux kernel's bpf and sockmap handling. This can lead to a situation where an element is unreferenced incorrectly, resultin...

PT-2024-36975

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to an invalid access to prog array in perf event detach bpf prog. A crash occurs when a tracepoint perf event with attr.inherit=1 is created, attached to a process, and a b...