CVE-2024-36000

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix missing hugetlblock for resv uncharge There is a recent report on UFFDIOCOPY over hugetlb: https://lore.kernel.org/all/[email protected]/ 350: lockdepassertheld&hugetlblock; Should be an issu...

DEBIAN-CVE-2024-35846

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix shrinker NULL crash with cgroupdisable=memory Christian reports a NULL deref in zswap that he bisected down to the zswap shrinker. The issue also cropped up in the bug trackers of libguestfs 1 and the Red Hat...

UBUNTU-CVE-2024-35846

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix shrinker NULL crash with cgroupdisable=memory Christian reports a NULL deref in zswap that he bisected down to the zswap shrinker. The issue also cropped up in the bug trackers of libguestfs 1 and the Red Hat...

kernel security and bug fix update

5.14.0-427.16.14.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

SUSE CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

DEBIAN-CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

UBUNTU-CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671 cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671 cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671 cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671

CVE-2022-48671 affects the Linux kernel in the cgroup subsystem: a missing cpus_read_lock() in cgroup_attach_task_all() allowed a deadlock with threadgroup_rwsem, mitigated by adding cpus_read_lock() (aligned with cgroup_procs_write_start()). The issue was observed by syzbot at cpuset_attach() an...

kernel: mm: multi-gen LRU: fix crash during cgroup migration

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

kernel: mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()

A flaw was found in the memory management subsystem in the Linux kernel. A NULL pointer dereference can be triggered due to an improper check of the memory cgroup value, resulting in a system crash and a denial of service...

kernel: memcontrol: ensure memcg acquired by id is properly set up

In the Linux kernel, the following vulnerability has been resolved: memcontrol: ensure memcg acquired by id is properly set up In the eviction recency check, we attempt to retrieve the memcg to which the folio belonged when it was evicted, by the memcg id stored in the shadow entry. However, ther...

kernel: blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Reinit blkgiostatset after clearing in blkcgresetstats When blkgalloc is called to allocate a blkcggq structure with the associated blkgiostatset's, there are 2 fields within blkgiostatset that requires proper...

kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion

A flaw was found in the filelockinit in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface POSIX file locks...

SUSE CVE-2022-48638

In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroupgetfromid must check the looked-up kn is a directory cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace...