Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-41080

In the Linux kernel, the following vulnerability has been resolved: iouring: fix possible deadlock in ioregisteriowqmaxworkers The ioregisteriowqmaxworkers function calls ioputsqdata, which acquires the sqd-lock without releasing the uringlock. Similar to the commit 009ad9f0c6ee "iouring: drop...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-27014)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27014 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2024-27002)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27002 advisory. - In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Do a runtime PM g...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-26934)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26934 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in...

August 29, 2024—KB5041582 (OS Build 19045.4842) Preview

None None...

kernel: ice: fix LAG and VF lock dependency in ice_reset_vf()

CVE-2024-36003 pertains to a deadlock vulnerability in the Linux kernel's ICE driver, which manages Intel Ethernet controllers. The issue arises from improper lock acquisition order between the Link Aggregation LAG mutex and the Virtual Function VF configuration lock within the iceresetvf functio...

kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()

A vulnerability was found in the Linux kernel's mac80211 component within the ieee80211stapsdeliverwakeup function, where improper locking of the sta-pslock can lead to a deadlock condition, which occurs because the function uses a spin lock without preventing softirq execution on the same CPU,...

kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING

A vulnerability was found in the Linux kernel's md/raid5 implementation within the raid5d function. This flaw can cause a deadlock when handling I/O operations due to a conflict between the reconfigmutex and the MDSBCHANGEPENDING flag, leading to excessive CPU usage and denial of service...

CLSA-2024-1724693366 kernel: Fix of 15 CVEs

net: ice: Fix potential NULL pointer dereference in icebridgesetlink CVE-2024-26855 - tty: Fix out-of-bound vmalloc access in imageblit CVE-2021-47383 - drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - Revert: GFS2: Skip dlmunlock calls during unmount CVE-2024-38570 -...

CVE-2024-44935

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseportaddsock. syzbot reported a null-ptr-deref while accessing sk2-skreuseportcb in reuseportaddsock. 0 The repro first creates a listener with SOREUSEPORT. Then, it creates another listener on the...

SUSE CVE-2022-48930

In the Linux kernel, the following vulnerability has been resolved: RDMA/ibsrp: Fix a deadlock Remove the flushworkqueuesystemlongwq call since flushing systemlongwq is deadlock-prone and since that call is redundant with a preceding cancelworksync...

CVE-2022-48930

In the Linux kernel, the following vulnerability has been resolved: RDMA/ibsrp: Fix a deadlock Remove the flushworkqueuesystemlongwq call since flushing systemlongwq is deadlock-prone and since that call is redundant with a preceding cancelworksync Mitigation Mitigation for this issue is either n...

CVE-2022-48920

A flaw was found in the btrfs module in the Linux Kernel. In some conditions, a race condition can trigger an assertion failure, causing a crash, resulting in a denial of service...

CVE-2022-48930

In the Linux kernel, the following vulnerability has been resolved: RDMA/ibsrp: Fix a deadlock Remove the flushworkqueuesystemlongwq call since flushing systemlongwq is deadlock-prone and since that call is redundant with a preceding cancelworksync...

DEBIAN-CVE-2022-48930

In the Linux kernel, the following vulnerability has been resolved: RDMA/ibsrp: Fix a deadlock Remove the flushworkqueuesystemlongwq call since flushing systemlongwq is deadlock-prone and since that call is redundant with a preceding cancelworksync...

UBUNTU-CVE-2022-48930

In the Linux kernel, the following vulnerability has been resolved: RDMA/ibsrp: Fix a deadlock Remove the flushworkqueuesystemlongwq call since flushing systemlongwq is deadlock-prone and since that call is redundant with a preceding cancelworksync...

CVE-2022-48930 RDMA/ib_srp: Fix a deadlock

In the Linux kernel, the following vulnerability has been resolved: RDMA/ibsrp: Fix a deadlock Remove the flushworkqueuesystemlongwq call since flushing systemlongwq is deadlock-prone and since that call is redundant with a preceding cancelworksync...

CVE-2022-48930 RDMA/ib_srp: Fix a deadlock

In the Linux kernel, the following vulnerability has been resolved: RDMA/ibsrp: Fix a deadlock Remove the flushworkqueuesystemlongwq call since flushing systemlongwq is deadlock-prone and since that call is redundant with a preceding cancelworksync...

CVE-2022-48930

In the Linux kernel, the following vulnerability has been resolved: RDMA/ibsrp: Fix a deadlock Remove the flushworkqueuesystemlongwq call since flushing systemlongwq is deadlock-prone and since that call is redundant with a preceding cancelworksync...