PT-2022-35015 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the Bluetooth hci sysfs component in the Linux Kernel. It involves attempting to call device add multiple times. The actual impact and attack plausibility have not yet...

PT-2022-35897 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.331 Description: The issue is related to the Bluetooth hci sysfs in the Linux Kernel, where an attempt to call device add multiple times could potentially lead to security vulnerabilities. The actual impact...

PT-2022-35110 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the hci ldisc,serdev component. The actual impact and attack plausibility have not yet been...

2022-11 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5019080)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

2022-11 Cumulative Update for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems (KB5019962)

Install this update to resolve issues in Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, y...

kernel: use-after-free vulnerability in function sco_sock_sendmsg()

A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...

kernel: use-after-free vulnerability in function sco_sock_sendmsg()

A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...

KB5027388: Compatibility update for installing and recovering Windows Server 2022 and Azure Stack HCI, version 22H2: June 13, 2023

None Summary This update makes improvements to the Windows recovery features for Windows Server 2022 and Azure Stack HCI, version 22H2. How to get this update Install this updateRelease Channel| Available| Next Step ---|---|--- Windows Update and Microsoft Update| Yes| This update is available...

KB5019081: Windows Server 2022 / Azure Stack HCI 21H2 / 22H2 Security Update (November 2022)

The remote Windows host is missing security update 5019081. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 - Windows Kerberos...

KB5019962: Windows 10 version 17784 / Azure Stack HCI Security Update (November 2022)

The remote Windows host is missing security update 5019962. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is copyright C...

November 8, 2022 Security update (KB5019962)

None None...

November 8, 2022 Servicing stack update (KB5020804 )

None None...

The vulnerability of the net/bluetooth/hci_event.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/bluetooth/hcievent.c component in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

October 17, 2022 Non-security update (KB5020446) Out-of-band

None None...

2022-10 Cumulative Update for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems (KB5018415)

Install this update to resolve issues in Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, y...

KB5018415: Windows 10 version 17784 / Azure Stack HCI Security Update (October 2022)

The remote Windows host is missing security update 5018415. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is copyright C...

October 11, 2022 Security update (KB5018415)

None None...

September 20, 2022 Servicing stack update (KB5017395)

None None...

GSD-2022-1005280 Bluetooth: When HCI work queue is drained, only queue chained work

Bluetooth: When HCI work queue is drained, only queue chained work This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

2022-09 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5017392)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...