SUSE SLED12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3748-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3748-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs...

SUSE-SU-2021:3710-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-24534 fixes several issues. The following security issues were fixed: - CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module bsc1190432. - CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in...

EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2021-2745)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2745)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:1477-1 Security update for the Linux Kernel

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13405: The inodeinitowner function in fs/inode.c allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID t...

UVI-2021-1002199 riscv, bpf: Fix potential NULL dereference

riscv, bpf: Fix potential NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002199 riscv, bpf: Fix potential NULL dereference

riscv, bpf: Fix potential NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002131 riscv, bpf: Fix potential NULL dereference

riscv, bpf: Fix potential NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002065 riscv, bpf: Fix potential NULL dereference

riscv, bpf: Fix potential NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit...

OSV-2021-1576 Heap-buffer-overflow in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40957 Crash type: Heap-buffer-overflow WRITE 8 Crash state: bpfobjectopen bpfobjectopenmem bpf-object-fuzzer.c...

PT-2021-30594

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.14.15 Description A memory leak issue was discovered, caused by missing cgroup bpf offline. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-30529

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description A memory leak issue was discovered, potentially affecting the security of the system. The issue is related to a missing cgroup bpf offline and was introduced in version v5.10. The actual impa...

PT-2021-26534

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description A memory leak issue was discovered, potentially affecting the security of the system. The issue is related to a missing cgroup bpf offline call. The actual impact and attack plausibility have...

PT-2021-26599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.14.15 Description A memory leak issue was discovered, caused by missing cgroup bpf offline. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26668

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.15 Description: A memory leak issue was discovered, caused by missing cgroup bpf offline. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-30663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15 Description A memory leak issue was discovered, caused by missing cgroup bpf offline. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.10...

PT-2021-27894

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 8 crash has been reported. The crash occurs in the bpf object open function, specifically in the bpf object open mem function,...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=5747922482888704 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x603000000118...

libbpf:bpf-object-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6033144516575232 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerubsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f640000002b Crash State: NULL Sanitizer: undefined UBSAN...

Ubuntu: Security Advisory (USN-5137-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...