GSD-2023-1001148 bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data

bpf, sockmap: Fix repeated calls to sockput when msg has moredata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001143 bpf, sockmap: fix race in sock_map_free()

bpf, sockmap: fix race in sockmapfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit a443c55d96dede82a724df6e70a318ad15c199e...

GSD-2023-1001016 bpf: make sure skb->len != 0 when redirecting to a tunneling device

bpf: make sure skb-len != 0 when redirecting to a tunneling device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000801 selftests/bpf: Fix memory leak caused by not destroying skeleton

selftests/bpf: Fix memory leak caused by not destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000800 selftest/bpf: Fix memory leak in kprobe_multi_test

selftest/bpf: Fix memory leak in kprobemultitest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000785 bpf: Fix slot type check in check_stack_write_var_off

bpf: Fix slot type check in checkstackwritevaroff This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000775 selftests/bpf: Fix xdp_synproxy compilation failure in 32-bit arch

selftests/bpf: Fix xdpsynproxy compilation failure in 32-bit arch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000769 selftests/bpf: fix memory leak of lsm_cgroup

selftests/bpf: fix memory leak of lsmcgroup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000745 bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data

bpf, sockmap: Fix repeated calls to sockput when msg has moredata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000739 bpf, sockmap: fix race in sock_map_free()

bpf, sockmap: fix race in sockmapfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit e8b2b392a646bf5cb9413c1cc7a39d99c1b65a62...

GSD-2023-1000622 bpf: prevent leak of lsm program after failed attach

bpf: prevent leak of lsm program after failed attach This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000538 selftests/bpf: Fix conflicts with built-in functions in bpf_iter_ksym

selftests/bpf: Fix conflicts with built-in functions in bpfiterksym This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000064 powerpc/bpf/32: Fix Oops on tail call tests

powerpc/bpf/32: Fix Oops on tail call tests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2023-34093 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to the bpf component in the Linux Kernel, specifically when redirecting to a tunneling device. It ensures that skb-len is not equal to 0. The actual impact and attack...

CVE-2022-3543

A flaw was found in unixsockdestructor/unixreleasesock in net/unix/afunix.c in the BPF component in the Linux Kernel. This issue may lead to a memory leak problem. Mitigation Mitigation for this issue is either not available or the currently available options dont meet the Red Hat Product Securit...

systemd security and bug fix update

239-68.0.2.1 - Backport upstream pstore dmesg fix Orabug: 34850699 - Standardize ioctl BTRFSIOCQGROUPCREATE check and return -ENOTCONN, if quota is not enabled Orabug: 34694253 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev...

container-tools:rhel8 bug fix and enhancement update

An update is available for runc, aardvark-dns, podman, oci-seccomp-bpf-hook, buildah, toolbox, slirp4netns, criu, cockpit-podman, fuse-overlayfs, container-selinux, conmon, libslirp, containernetworking-plugins, udica, containers-common, netavark, skopeo, crun, python-podman. This update affects...

Ubuntu 22.10 : Linux kernel vulnerabilities (USN-5793-3)

The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5793-3 advisory. It was discovered that the iouring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free...

Ubuntu 22.10 : Linux kernel (IBM) vulnerabilities (USN-5793-4)

The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5793-4 advisory. It was discovered that the iouring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free...

Ubuntu: Security Advisory (USN-5790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...