CVE-2022-3650 affecting package ceph for versions less than 18.2.1-1

CVE-2022-3650 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-27304 affecting package ceph for versions less than 18.2.1-1

CVE-2020-27304 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3854 affecting package ceph for versions less than 18.2.1-1

CVE-2022-3854 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1

CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-8457 affecting package ceph for versions less than 18.2.1-1

CVE-2019-8457 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-16168 affecting package ceph for versions less than 18.2.1-1

CVE-2019-16168 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20505 affecting package ceph for versions less than 18.2.1-1

CVE-2018-20505 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-13630 affecting package ceph for versions less than 18.2.1-1

CVE-2020-13630 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2024-26689

In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...

kernel security, bug fix, and enhancement update

4.18.0-513.24.19.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

A flaw was found in Ceph relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW causing a denial of service.

...

A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump and dump privileged information.

...

CVE-2024-26689

A use-after-free flaw was found in the Linux kernel’s experimental Ceph distributed file system. This flaw allows a local user to crash the system...

CVE-2024-26689

In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...

DEBIAN-CVE-2024-26689

In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...

CVE-2024-26689

In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...

UBUNTU-CVE-2024-26689

In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...

CVE-2024-26689

CVE-2024-26689 affects the Linux kernel via the Ceph subsystem: in fs/ceph/caps.c, encode_cap_msg() previously could perform a use-after-free due to a race between refcount increment and free in arg->xattr_buf handling. The race around ceph_buffer_get/ceph_buffer_put(ci->i_xattrs.blob) allo...

CVE-2024-26689 ceph: prevent use-after-free in encode_cap_msg()

In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...

CVE-2024-26689 ceph: prevent use-after-free in encode_cap_msg()

In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encodecapmsg In fs/ceph/caps.c, in encodecapmsg, "use after free" error was caught by KASAN at this line - 'cephbuffergetarg-xattrbuf;'. This implies before the refcount could be increment here, it...