GSD-2023-1002082 net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()

net: enetc: avoid deadlock in enetctxonesteptstamp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...

GSD-2023-1002076 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change

Bluetooth: Fix possible deadlock in rfcommskstatechange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...

GSD-2023-1001929 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change

Bluetooth: Fix possible deadlock in rfcommskstatechange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

PT-2023-35005 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential issue in the Bluetooth implementation of the Linux Kernel may cause a deadlock in rfcomm sk state change. The actual impact and attack plausibility have not yet been proven...

PT-2023-35015 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to a potential deadlock in the enetc tx onestep tstamp function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2024-14721

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc3-syzkaller-00376-g7c6984405241 Description The issue is related to a deadlock that can occur when using the btrfs file system. Specifically, it happens when the fiemap code triggers a fault while accessi...

EulerOS 2.0 SP8 : mariadb (EulerOS-SA-2023-1327)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc. CVE-2022-32082 - In MariaDB...

Amazon Linux 2 : kernel, --advisory ALAS2-2023-1932 (ALAS-2023-1932)

The version of kernel installed on the remote host is prior to 4.14.304-226.531. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1932 advisory. Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interfa...

EulerOS Virtualization 3.0.2.2 : mariadb (EulerOS-SA-2023-1274)

According to the versions of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 -...

SUSE-SU-2023:0148-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3564: Fixed a bug which could lead to use after free, it was found in the function l2capreassemblesdu of the file net/bluetooth/l2capcore.c of the...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2023-041)

The version of kernel installed on the remote host is prior to 5.4.228-131.415. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2023-041 advisory. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2023-025)

The version of kernel installed on the remote host is prior to 5.10.162-141.675. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2023-025 advisory. A vulnerability classified as problematic has been found in Linux Kernel. This affects the function...

kernel: iavf: Fix reset error handling

A deadlock condition exists in the linux kernel such that when calling iavfclose in iavfresettask error handling,doing so can lead to double call of napidisable thereby leading to a denial of service due to the deadlock...

Important: kernel

Issue Overview: A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVMEIOCTLRESET and the NVMEIOCTLSUBSYSRESET through the device file of the driver, resulting in a PCIe link disconnect. CVE-2022-3169 A vulnerability classified as...

Important: kernel

Issue Overview: A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fibnhmatch of the file net/ipv4/fibsemantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is...

Important: kernel

Issue Overview: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function followpagepte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remotely. It is recommended ...

GSD-2023-1001289 dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata

dm thin: Fix ABBA deadlock between shrinkslab and dmpoolabortmetadata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001257 ext4: fix deadlock due to mbcache entry corruption

ext4: fix deadlock due to mbcache entry corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000486 dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata

dm thin: Fix ABBA deadlock between shrinkslab and dmpoolabortmetadata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000434 ext4: fix deadlock due to mbcache entry corruption

ext4: fix deadlock due to mbcache entry corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...