CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-0266)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0266 advisory. - A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3107)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3107 advisory. - An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in...

AZL-25607 CVE-2022-3707 affecting package hyperv-daemons for versions less than 5.15.102.1-1

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intelgvtdmamapguestpage function. This issue could allow a local user to crash the system...

CVE-2022-0742 affecting package hyperv-daemons 5.10.167.1-1

CVE-2022-0742 affecting package hyperv-daemons 5.10.167.1-1. A patched version of the package is available...

CVE-2022-27666 affecting package hyperv-daemons 5.10.167.1-1

CVE-2022-27666 affecting package hyperv-daemons 5.10.167.1-1. A patched version of the package is available...

CVE-2023-0266 affecting package hyperv-daemons 5.10.167.1-1

CVE-2023-0266 affecting package hyperv-daemons 5.10.167.1-1. A patched version of the package is available...

AZL-25901 CVE-2023-23000 affecting package hyperv-daemons for versions less than 5.15.111.1-1

In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegraxusbfindportnode return value. Callers expect NULL in the error case, but an error pointer is used...

AZL-25583 CVE-2023-26545 affecting package hyperv-daemons for versions less than 5.15.102.1-1

In the Linux kernel before 6.1.13, there is a double free in net/mpls/afmpls.c upon an allocation failure for registering the sysctl table under a new location during the renaming of a device...

SUSE CVE-2022-3107

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

CVE-2023-0394 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2023-0394 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-47940 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-47940 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1. A patched version of the package is available...

CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-47929 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-47929 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-4379 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-4379 affecting package hyperv-daemons for versions less than 5.15.92.1-1. This CVE either no longer is or was never applicable...

AZL-26405 CVE-2023-25012 affecting package hyperv-daemons for versions less than 5.15.118.1-1

The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...

AZL-34804 CVE-2023-25012 affecting package hyperv-daemons for versions less than 6.6.14.1-1

The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...

AZL-13190 CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRVCTLIOCTLELEMREAD|WRITE32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past...

CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1

CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1. An upgraded version of the package is available that resolves this issue...

AZL-13168 CVE-2023-0394 affecting package hyperv-daemons for versions less than 5.15.92.1-1

A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...