CBL Mariner 2.0 Security Update: kernel (CVE-2024-43853)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43853 advisory. - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in...

OESA-2024-2217 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This...

memcg: protect concurrent access to mem_cgroup_idr

...

CentOS 7 : kpatch-patch (RHSA-2022:4655)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4655 advisory. - A vulnerability was found in the Linux kernel's cgroupreleaseagentwrite in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances,...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages CVE-2024-41011 In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error...

kernel: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory

A flaw was found in the Linux kernel in which certain cgroup configurations could cause a kernel panic, resulting in a Denial of Service...

kernel: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory

A flaw was found in the Linux kernel in which certain cgroup configurations could cause a kernel panic, resulting in a Denial of Service...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

kernel: perf: Fix list corruption in perf_cgroup_switch()

A vulnerability was found in the Linux kernel's performance monitoring subsystem, where the perfcgroupswitch function can lead to list corruption on the cgrpcpuctxlist. This occurs during the iteration of the list when an entry is removed using perfcgroupeventdisable, which does not safely handle...

kernel: perf: Fix list corruption in perf_cgroup_switch()

A vulnerability was found in the Linux kernel's performance monitoring subsystem, where the perfcgroupswitch function can lead to list corruption on the cgrpcpuctxlist. This occurs during the iteration of the list when an entry is removed using perfcgroupeventdisable, which does not safely handle...

DEBIAN-CVE-2024-46789

In the Linux kernel, the following vulnerability has been resolved: mm/slub: add check for s-flags in the alloctaggingslabfreehook When enable CONFIGMEMCG & CONFIGKFENCE & CONFIGKMEMLEAK, the following warning always occurs,This is because the following call stack occurred: mempoolalloc...

UBUNTU-CVE-2024-46789

In the Linux kernel, the following vulnerability has been resolved: mm/slub: add check for s-flags in the alloctaggingslabfreehook When enable CONFIGMEMCG & CONFIGKFENCE & CONFIGKMEMLEAK, the following warning always occurs,This is because the following call stack occurred: mempoolalloc...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages CVE-2024-41011 In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error...

The vulnerability in the `block/blk-cgroup.c` component of the Linux operating system’s kernel allows for uncontrolled resource consumption. This enables attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the block/blk-cgroup.c component of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

DEBIAN-CVE-2024-45021

In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the terminating NUL is mapped let alone initialized with anything sane...

AZL-49170 CVE-2024-45021 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the terminating NUL is mapped let alone initialized with anything sane...

AZL-49242 CVE-2024-45021 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the terminating NUL is mapped let alone initialized with anything sane...

UBUNTU-CVE-2024-45021

In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a user-triggerable oops we are not guaranteed that anything past the terminating NUL is mapped let alone initialized with anything sane...

cgroup/cpuset: Prevent UAF in proc_cpuset_show()

...

SUSE CVE-2024-44975

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: fix panic caused by partcmdupdate We find a bug as below: BUG: unable to handle page fault for address: 00000003 PGD 0 P4D 0 Oops: 0000 1 PREEMPT SMP NOPTI CPU: 3 PID: 358 Comm: bash Tainted: G W I 6.6.0-10893-g60d...