Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to directory traversal due to its use of Apache Commons IO (CVE-2021-29425)

Summary Apache Commons IO is used by several components in IBM Cloud Pak for Multicloud Management Monitoring. The product does not allow input that processes files or directories, but the affected software has been updated out of an abundance of caution. Vulnerability Details CVEID: CVE-2021-294...

GSD-2022-1003932 nbd: fix io hung while disconnecting device

nbd: fix io hung while disconnecting device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003713 blk-iolatency: Fix inflight count imbalances and IO hangs on offline

blk-iolatency: Fix inflight count imbalances and IO hangs on offline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003674 nbd: fix io hung while disconnecting device

nbd: fix io hung while disconnecting device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003299 blk-iolatency: Fix inflight count imbalances and IO hangs on offline

blk-iolatency: Fix inflight count imbalances and IO hangs on offline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003196 nbd: fix io hung while disconnecting device

nbd: fix io hung while disconnecting device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002884 nbd: fix io hung while disconnecting device

nbd: fix io hung while disconnecting device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002535 nbd: fix io hung while disconnecting device

nbd: fix io hung while disconnecting device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

kernel: dm: fix mempool NULL pointer race when completing IO

A flaw was found in the Linux kernel's Device Mapper DM subsystem. This flaw allows a local user to cause a denial of service DoS by triggering a system crash. The issue occurs due to a race condition when an input/output I/O request completes concurrently with a table swap operation, resulting i...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

PT-2022-31937

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to a potential security vulnerability in the Linux Kernel, where an io hung occurs while disconnecting a device. The actual impact and attack plausibility have not yet be...

PT-2022-32195

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a potential security vulnerability in the Linux Kernel, where an io hung occurs while disconnecting a device. The actual impact and attack plausibility have not yet...

PT-2022-31562

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.15.45 Description The issue is related to inflight count imbalances and IO hangs on offline devices. It was introduced in version v5.0 and fixed in version v5.15.46. The actual impact and attack plausibili...

PT-2022-31557

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.17 through 5.15.45 Description The issue concerns a double free of io acct set bioset. It was introduced in version v5.15.17 and fixed in version v5.15.46. The actual impact and attack plausibility have not yet been...

PT-2022-32081

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a potential security vulnerability in the Linux Kernel, where an io hung occurs while disconnecting a device. The actual impact and attack plausibility have not yet...

PT-2022-31147

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to a potential security vulnerability in the Linux Kernel, where an io hung occurs while disconnecting a device. The actual impact and attack plausibility have not yet be...

PT-2022-31260

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.17.13 Description The issue is related to inflight count imbalances and IO hangs on offline devices. It was introduced in version v5.0 and fixed in version v5.17.14. The actual impact and attack plausibili...

PT-2022-31248

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns a double free of io acct set bioset. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.14, update...

PT-2022-31729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to a potential security vulnerability in the Linux Kernel, where an io hung occurs while disconnecting a device. The actual impact and attack plausibility have not yet...

PT-2022-32146

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to inflight count imbalances and IO hangs on offline devices. It was introduced in version v4.19.29 and fixed in version v4.19.247. Recommendations For Linux Kernel...