container-tools:rhel8 security update

An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

kernel security and bug fix update

3.10.0-1160.31.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 vmmm after calling handleuserfault Phili...

kernel: Speculation on pointer arithmetic against bpf_context pointer

A flaw was found in the Linux kernels eBPF verification code. By default accessing the eBPF verifier is only accessible to privileged users with CAPSYSADMIN. A local user with the ability to insert eBPF instructions can use the eBPF verifier to abuse a spectre like flaw where they can infer all...

SUSE SLES12 Security Update : kernel (Live Patch 36 for SLE 12 SP3) (SUSE-SU-2021:1865-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1865-1 advisory. This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed: - Fix a kernel warni...

SUSE SLES12 Security Update : kernel (Live Patch 38 for SLE 12 SP3) (SUSE-SU-2021:1870-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1870-1 advisory. This update for the Linux Kernel 4.4.180-94141 fixes several issues. The following security issues were fixed: - CVE-2020-36322:...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-1971)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:0843-1 Rating: important References: 1087082 1133021 1152457 1152489 1155518 1156395 1164648 1177666 1178418 1179519 1179827 1179851 1182378 1182999 1183346 1183976 1184259 1185428 1185495 1185589...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2021-1971)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a flaw reported in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The issue...

PT-2021-29111

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.123 Description The issue concerns the bpf and the simulation of speculative domain for immediates. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-29131

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue concerns the bpf and the simulation of speculative domain for immediates. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29080

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.41 Description The issue concerns the bpf and the simulation of speculative domain for immediates. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-29038

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.8 Description The issue concerns the bpf and its handling of immediates, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25117

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.123 Description The issue concerns the bpf and the simulation of speculative domain for immediates. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-25044

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.8 Description The issue concerns the bpf and its handling of immediates, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25086

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.41 Description The issue concerns the bpf and the simulation of speculative domain for immediates. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-25137

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue concerns the bpf and the simulation of speculative domain for immediates. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2024-11179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to buggy SELinux lockdown permission checks in the Linux kernel. The problem arises from the implementation of the locked down LSM hook to SELinux, which aims to...

UVI-2021-1000185 bpf: Fix masking negation logic upon negative dst register

bpf: Fix masking negation logic upon negative dst register This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.190 by commit...

GSD-2021-1000165 bpf: Fix masking negation logic upon negative dst register

bpf: Fix masking negation logic upon negative dst register This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.35 by commit...

UVI-2021-1000127 bpf: Fix masking negation logic upon negative dst register

bpf: Fix masking negation logic upon negative dst register This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.19 by commit...