GO-2021-0100 Denial of service via deadlock in github.com/containers/storage

Due to a goroutine deadlock, using github.com/containers/storage/pkg/archive.DecompressStream on a xz archive returns a reader which will hang indefinitely when Close is called. An attacker can use this to cause denial of service if they are able to cause the caller to attempt to decompress an...

Virtuozzo Hybrid Infrastructure 4.5 Update 2

This update provides bug fixes and improvements. Vulnerability id: VSTOR-44043 With backup storage geo-replication, promotion to the primary cluster fails with the error: "name 'payload' is not defined." Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands i...

Virtuozzo Hybrid Infrastructure 4.6 Update 1

This update provides new features, as well as bug fixes and improvements. Vulnerability id: VSTOR-45315 The MDS service may be unstable under a high load condition. Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands in the iSCSI kernel module. Vulnerabilit...

containers/storage: DoS via malicious image

A deadlock vulnerability was found in github.com/containers/storage. When a container image is processed, each layer is unpacked using tar. If one of those layers is not a valid tar archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar...

SUSE-SU-2021:2473-1 Security update for slurm

This update for slurm fixes the following issues: Updated to 20.11.7 Summary of new features: CVE-2021-31215: Fixed a remote code execution as SlurmUser bsc1186024. slurmd - handle configless failures gracefully instead of hanging indefinitely. select/constres - fix Dragonfly topology not selecti...

PT-2021-4256

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.4 Description The issue is related to the btrfs implementation in the Linux kernel, which can lead to a denial of service due to uncontrolled memory allocation. This can occur when there is a shortage of fre...

UVI-2021-1001085 mac80211: fix deadlock in AP/VLAN handling

mac80211: fix deadlock in AP/VLAN handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1001085 mac80211: fix deadlock in AP/VLAN handling

mac80211: fix deadlock in AP/VLAN handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1001031 usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler

usb: cdnsp: Fix deadlock issue in cdnspthreadirqhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1001031 usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler

usb: cdnsp: Fix deadlock issue in cdnspthreadirqhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

PT-2021-29496

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.10 Description A deadlock issue was found in the cdnsp thread irq handler. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.12 through...

PT-2021-25556

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.12 Description: A potential issue exists in the mac80211 component related to AP/VLAN handling, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven...

WS-2021-0288

Linux Kernel in versions v5.12 to before v5.12.13 has a deadlock in AP/VLAN handling...

PT-2021-25502

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.10 Description: A deadlock issue exists in the cdnsp thread irq handler. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.12 through...

PT-2021-29550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.12 Description A potential issue exists in the mac80211 component related to AP/VLAN handling, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven...

CVE-2021-3433

Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...

CentOS: Security Advisory for bpftool (CESA-2021:2314)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2021:2314 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

PT-2024-11347 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.4 Description: A deadlock vulnerability has been resolved in the Linux kernel. The issue occurs when the cfg80211 unregister wdev function is called while the link is still up, causing a deadlock due to the...

SUSE: Security Advisory (SUSE-SU-2012:0679-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...