GSD-2022-1004338 ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.

ipv4: Fix a data-race around sysctlfibmultipathuseneigh. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...

GSD-2022-1004337 ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

ipv4: Fix data-races around sysctlfibmultipathhashpolicy. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...

GSD-2022-1004336 ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.

ipv4: Fix data-races around sysctlfibmultipathhashfields. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...

GSD-2022-1004184 ipv4: Fix a data-race around sysctl_fib_sync_mem.

ipv4: Fix a data-race around sysctlfibsyncmem. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004112 ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.

ipv4: Fix a data-race around sysctlfibmultipathuseneigh. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004111 ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

ipv4: Fix data-races around sysctlfibmultipathhashpolicy. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004108 ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.

ipv4: Fix data-races around sysctlfibmultipathhashfields. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

PT-2022-32599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns data-races around sysctl fib multipath hash policy in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-32370

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns data-races around sysctl fib multipath hash fields in the ipv4 component. It was introduced in version v5.14 and fixed in version v5.18.15. The actual impact and attack...

PT-2022-32834

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-32961

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32446

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.18.12 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5...

PT-2022-32598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around sysctl fib multipath hash fields in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2022-2200)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driv...

Input validation

An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a PFE crash and thereby a Denial of Service DoS. An FPC will crash and reboot after receiving a specific transit IPv6 packet over...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.515.3.el7 - uek-rpm: Enable Pensando EMMC reset controller Thomas Tai Orabug: 34325721 - mfd: pensandoelbasr: Add Pensando Elba System Resource Chip Brad Larson Orabug: 34325721 - dsc-drivers: update drivers for 1.15.9-C-65 Shannon Nelson Orabug: 34325721 4.14.35-2047.515.2.el7 -...

Oracle Linux 8 : kernel (ELSA-2022-5316)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5316 advisory. - debug: lockdown kgdb Orabug: 34270802 CVE-2022-21499 - esp: limit skbpagefragrefill use to a single page Sabrina Dubroca 2062114 CVE-2022-27666 - esp...

OESA-2022-1734 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A flaw was found in grub2 when handling split HTTP headers. While processing a split HTTP header, grub2 wrongly advanc...

kernel: buffer overflow in IPsec ESP transformation code

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat...